Overview

overview

10

Static

static

5

d272c58f65...18.exe

windows7-x64

10

d272c58f65...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    d272c58f65d0ab7ca56f5801c4276b2e_JaffaCakes118

  • Size

    1.1MB

  • Sample

    240907-vvcalaxcmh

  • MD5

    d272c58f65d0ab7ca56f5801c4276b2e

  • SHA1

    142eaf32a020d578054d2e9069209b5c09974ba4

  • SHA256

    6b425f6cb96411de7b0738f6564b8607dcf2f58212b1ea15189af8476d2799af

  • SHA512

    191fec85e89b0557b59233110b17782ff16f22477c797999797763d8a43b6c0c74c14d69b4cd8097d8200edaba1090caa0ad5b917eb5ff7def37efeaea629b86

  • SSDEEP

    24576:OAHnh+eWsN3skA4RV1Hom2KXMmHaTw5sJ/nY5:5h+ZkldoPK8YaTq

Score
10/10
netwirebotnetdiscoveryratstealer

Malware Config

Extracted

Family

netwire

C2

masterhugo231.servecounterstrike.com:3098

Attributes
  • activex_autorun

    false

  • copy_executable

    false

  • delete_original

    false

  • host_id

    HostId-%Rand%

  • keylogger_dir

    %AppData%\Logs\

  • lock_executable

    false

  • offline_keylogger

    true

  • password

    Goodluck101

  • registry_autorun

    false

  • use_mutex

    false

Targets

    • Target

      d272c58f65d0ab7ca56f5801c4276b2e_JaffaCakes118

    • Size

      1.1MB

    • MD5

      d272c58f65d0ab7ca56f5801c4276b2e

    • SHA1

      142eaf32a020d578054d2e9069209b5c09974ba4

    • SHA256

      6b425f6cb96411de7b0738f6564b8607dcf2f58212b1ea15189af8476d2799af

    • SHA512

      191fec85e89b0557b59233110b17782ff16f22477c797999797763d8a43b6c0c74c14d69b4cd8097d8200edaba1090caa0ad5b917eb5ff7def37efeaea629b86

    • SSDEEP

      24576:OAHnh+eWsN3skA4RV1Hom2KXMmHaTw5sJ/nY5:5h+ZkldoPK8YaTq

    Score
    10/10
    netwirebotnetdiscoveryratstealer

    • NetWire RAT payload

      rat

    • Netwire

      Netwire is a RAT with main functionalities focused password stealing and keylogging, but also includes remote control capabilities as well.

      botnetstealernetwire

    • Drops startup file

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks