Overview

overview

10

Static

static

5

cc45941a28...18.exe

windows7-x64

10

cc45941a28...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    cc45941a282ee4e826b7833115141489_JaffaCakes118

  • Size

    1.1MB

  • Sample

    240831-fr2zhsxcnr

  • MD5

    cc45941a282ee4e826b7833115141489

  • SHA1

    e9efda05feb2d62e29831eff277d589bed3ae639

  • SHA256

    f5f4f2cbcd96895a517ac89b3f52baac737855d2183e40553ebbd19e66d7ffcb

  • SHA512

    40bdfd957373954056f9c798613dd66ad65f935fef90ea2bbf0a726b5ed468013054bf77893c28d650db5de34164b596d50c1d7730afb24f4a53602ba07b046f

  • SSDEEP

    24576:tCdxte/80jYLT3U1jfsWawl2LIXpMBYJQ7Vp93AQ:kw80cTsjkWawIxB6U5

Score
10/10
netwirebotnetdiscoveryratstealer

Malware Config

Extracted

Family

netwire

C2

79.134.225.73:1968

Attributes
  • activex_autorun

    false

  • copy_executable

    false

  • delete_original

    false

  • host_id

    pd1n9

  • lock_executable

    false

  • mutex

    KHAtGUwc

  • offline_keylogger

    false

  • password

    Kimbolsapoq!P13

  • registry_autorun

    false

  • use_mutex

    true

Targets

    • Target

      cc45941a282ee4e826b7833115141489_JaffaCakes118

    • Size

      1.1MB

    • MD5

      cc45941a282ee4e826b7833115141489

    • SHA1

      e9efda05feb2d62e29831eff277d589bed3ae639

    • SHA256

      f5f4f2cbcd96895a517ac89b3f52baac737855d2183e40553ebbd19e66d7ffcb

    • SHA512

      40bdfd957373954056f9c798613dd66ad65f935fef90ea2bbf0a726b5ed468013054bf77893c28d650db5de34164b596d50c1d7730afb24f4a53602ba07b046f

    • SSDEEP

      24576:tCdxte/80jYLT3U1jfsWawl2LIXpMBYJQ7Vp93AQ:kw80cTsjkWawIxB6U5

    Score
    10/10
    netwirebotnetdiscoveryratstealer

    • NetWire RAT payload

      rat

    • Netwire

      Netwire is a RAT with main functionalities focused password stealing and keylogging, but also includes remote control capabilities as well.

      botnetstealernetwire

    • Drops startup file

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks