Analysis
-
max time kernel
141s -
max time network
158s -
platform
windows10-2004_x64 -
resource
win10v2004-20240226-en -
resource tags
-
submitted
16-05-2024 20:06
General
-
Target
4cd0fb5fa0d4bbfdfb0c006c32b54f41_JaffaCakes118.exe
-
Size
1.3MB
-
MD5
4cd0fb5fa0d4bbfdfb0c006c32b54f41
-
SHA1
45213431fe0cc2b949c732c4c75dd02fe261a2c4
-
SHA256
cbef1bc9f78e49dc72ae10c654a45d9682ca434a2eafc726bf08dde00eb33e56
-
SHA512
3b99276aee99fa94d4a984520a11238d26323fab0ac5ab12f82248d2682b77d642091f1b30cf06ca0c282393ae8811c6afddd6ad054ff63dbe6e919405271216
-
SSDEEP
24576:FCdxte/80jYLT3U1jfsWavwjI9VI6F3itwaA9IixWvge3rQ:Mw80cTsjkWavFK6Ro/o
Malware Config
Signatures
-
NetWire RAT payload 3 IoCs
-
Netwire
Netwire is a RAT with main functionalities focused password stealing and keylogging, but also includes remote control capabilities as well.
Processes
-
C:\Users\Admin\AppData\Local\Temp\4cd0fb5fa0d4bbfdfb0c006c32b54f41_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\4cd0fb5fa0d4bbfdfb0c006c32b54f41_JaffaCakes118.exe"1⤵
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --mojo-platform-channel-handle=4340 --field-trial-handle=2252,i,16022092570067181109,3235558581947505669,262144 --variations-seed-version /prefetch:81⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
337KB
MD57bec1955dd3269b78fbf467cd874e07e
SHA113a610e1ce713045371741a7c4ec25079d0e283b
SHA256b5b2cc1b8cdf01fa09b9a4e884d04cde072c3052c0802bd14414112b1e80b0ff
SHA512e3e7a0fd66be2f960fe43947d97169d442738f5bd0f0e70413ade667d80ec1471069a8183552da937a4281c5df93dac858cd7b0eb69d1a8e6cbb9bea3814dd39
-
Filesize
348KB
-
Filesize
348KB
-
Filesize
348KB
-
Filesize
348KB
-
Filesize
348KB
-
Filesize
348KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
348KB