Overview

overview

10

Static

static

10

76ab73a63b...18.exe

windows7-x64

10

76ab73a63b...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    76ab73a63b75efb8dcbc5945ff451d90_JaffaCakes118

  • Size

    106KB

  • MD5

    76ab73a63b75efb8dcbc5945ff451d90

  • SHA1

    db76b6d816d20fafd28b9259c8c31fcbd42ca8c8

  • SHA256

    bb982088b6cb521ffb0e31495f6a5bc34351c14761709fb07c4d600bca541d9b

  • SHA512

    88d830595368ba03a23a4a521cafe4cd35881d3456ab4f6bbb2bf854ab0b66f314146cbca8690a5d31e5ac644bb8c628e5b695cfb2dd9f5be91cdaeb5528c2d4

  • SSDEEP

    3072:995Dyk7LnihAv8WewMcdTAIRIjQ4Q5d0qH/9RX:9f3nihAkWegdT/RIjQ4Q5ya9R

Score
10/10
ratnetwire

Malware Config

Extracted

Family

netwire

C2

drummerboy.duckdns.org:6440

Attributes
  • activex_autorun

    false

  • copy_executable

    false

  • delete_original

    false

  • host_id

    HostId-%Rand%

  • lock_executable

    false

  • mutex

    BhlkhXUt

  • offline_keylogger

    false

  • password

    Password

  • registry_autorun

    false

  • use_mutex

    true

Signatures

  • NetWire RAT payload 1 IoCs
    rat
  • Netwire family
    netwire
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 76ab73a63b75efb8dcbc5945ff451d90_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    844b1e992f862088369589b7cf91ba21


    Headers

    Imports

    Sections