1-4-2018: #NetWire RAT Configuration

I. Commuunication:
37.233.101.73:8888;213.152.162.104:8747;213.152.162.170:8747;213.152.162.109:8747;213.152.162.89:8747;109.232.227.138:8747;213.152.161.133:8747;213.152.161.211:8747;213.152.161.20:8747;213.152.161.10:8747;

II. Filename: %AppData%\Install\Host.exe

III. Self-delete:
ping 192.0.2.2 -n 1 -w %d >nul 2>&1
DEL /s "%s" >nul 2>&1
call :deleteSelf&exit /b
:deleteSelf
start /b "" cmd /c del "%%~f0"&exit /b

Hash: Skan Potwierdzenia Przelewu.PDF.js
675668bdca8ca362a5b6f33a376cca39

Payload: wrzucacz[.]pl/download/6391515022337
3F2F3F0C41CC4BDFB0AD17E0285040D1