NETWIRE Dynamic Configuration Extraction

Key takeaways NETWIRE has shown an increase in prevalence over the last year Elastic Security Labs created an extractor to pull out configuration data from NETWIRE files and memory dumps targeting the functions the malware uses to extract its encrypted data The NETWIRE extractor is freely available for download To download the NETWIRE...