← Back to Pulse Feed
PULSE DETAIL
PULSE NAME
Netwire RAT Behind Recent Targeted Attacks
WHITE AlienVault 2015-03-03 Modified: 2017-08-24
5
IOCs
LOW VOLUME
DropboxMcafeeNetwireRAT
Indicators of Compromise (5)
All hostname FileHash-SHA256
TYPEINDICATORDESCRIPTIONCREATED
hostname davidluciano.mooo.com — 2017-08-24
hostname papybrown.mooo.com — 2017-08-24
hostname jydonky.mooo.com — 2017-08-24
FileHash-SHA256 f43d9209f66b8ffa803c0621b9633b7d744f6926c016b842d451d77def6377cb — 2017-08-24
FileHash-SHA256 6b44c772bac7cc958b1b4535f02a584fc3a55377a3e7f4cc7eeb5a4ba99b0ead — 2017-08-24
References (1)
↗ https://blogs.mcafee.com/mcafee-labs/netwire-rat-behind-recent-targeted-attacks