Overview

overview

10

Static

static

3

2fd03cf435...18.exe

windows7-x64

10

2fd03cf435...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2fd03cf435ea19bd69da786c42951a62_JaffaCakes118

  • Size

    10.4MB

  • Sample

    240709-ldz6nawgqq

  • MD5

    2fd03cf435ea19bd69da786c42951a62

  • SHA1

    91d40f832fc305a206621e9965e6561ddecae0fd

  • SHA256

    0cf39897608cc89af6871a62b4e77314d62b7b54c15b55197aeae5d29b0390a1

  • SHA512

    fb776a56d5f8579c749340e214c629fdb058373c447c54b11ab8ba873125cfe0266177c50baa914bdf879997bab5867ee511d7a6e5891c55352068d024654419

  • SSDEEP

    98304:hq7DJmgjPT8HnR+8NG9ioUsdDiE24fJ4qm7/iAXflijzJkiTUGI0ZYW:gmgrQHRxFQDiZ+4xXf6zUGI0K

Score
10/10
netwirebotnetratstealer

Malware Config

Extracted

Family

netwire

C2

reroutetraffic.io:4548

Attributes
  • activex_autorun

    false

  • copy_executable

    false

  • delete_original

    false

  • host_id

    bprn2x

  • keylogger_dir

    %AppData%\SanderApp\

  • lock_executable

    false

  • offline_keylogger

    true

  • password

    iT5HZYc8pnFOlw3JAF8gfKBQcUZrrOyZ

  • registry_autorun

    false

  • use_mutex

    false

Targets

    • Target

      2fd03cf435ea19bd69da786c42951a62_JaffaCakes118

    • Size

      10.4MB

    • MD5

      2fd03cf435ea19bd69da786c42951a62

    • SHA1

      91d40f832fc305a206621e9965e6561ddecae0fd

    • SHA256

      0cf39897608cc89af6871a62b4e77314d62b7b54c15b55197aeae5d29b0390a1

    • SHA512

      fb776a56d5f8579c749340e214c629fdb058373c447c54b11ab8ba873125cfe0266177c50baa914bdf879997bab5867ee511d7a6e5891c55352068d024654419

    • SSDEEP

      98304:hq7DJmgjPT8HnR+8NG9ioUsdDiE24fJ4qm7/iAXflijzJkiTUGI0ZYW:gmgrQHRxFQDiZ+4xXf6zUGI0K

    Score
    10/10
    netwirebotnetratstealer

    • NetWire RAT payload

      rat

    • Netwire

      Netwire is a RAT with main functionalities focused password stealing and keylogging, but also includes remote control capabilities as well.

      botnetstealernetwire
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks