NetWire is a RAT, its functionality seems focused on password stealing and keylogging. It includes remote control capabilities as well. Keylog files are stored on the infected machine in an obfuscated form. The algorithm is: For i in range(0,num_read):.buffer[i] = (buffer)-0x24)-0x9D)&0xFF) and (i)- 0xFF).”]
Source: https://malpedia.caad.fkie.fraunhofer.de/details/win.netwire