Overview

overview

10

Static

static

10

81cadf613f...69.exe

windows7-x64

10

81cadf613f...69.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_8a3dc6b05266c7840e32a89fe9519aa36433ab06b55b8761b28b0c5519afaea2

  • Size

    83KB

  • Sample

    241223-wkh6tswqcz

  • MD5

    b2fd8a48358af8f41202377692f2d328

  • SHA1

    05c36329708156d70010175cfe721bd2682063b0

  • SHA256

    8a3dc6b05266c7840e32a89fe9519aa36433ab06b55b8761b28b0c5519afaea2

  • SHA512

    e9d5bb14082aec67af6c5ebaf890a8494ee88461d985575fda4eb2ee5d437b8a0bf94e360ced9c91b19a0b70b4d07c556cf458eba6bf45f5a751f1c578ed31b0

  • SSDEEP

    1536:MnQq/udBC2sgRuoW29CtdhulKvJAD6EkQKpk7y+wCW2F2OdU/QvzlhMCUqi1WbI:rdjJRT1uhaIQKqttgQvzlheqS

Score
10/10
netwirebotnetdiscoveryratstealer

Malware Config

Extracted

Family

netwire

C2

217.160.243.54:8080

Attributes
  • activex_autorun

    false

  • copy_executable

    false

  • delete_original

    false

  • host_id

    HostId-%Rand%

  • lock_executable

    false

  • offline_keylogger

    false

  • password

    Password

  • registry_autorun

    false

  • use_mutex

    false

Targets

    • Target

      81cadf613f108486862c5f79d0e5e3a320ca433eb595f6686f7cb7478367c669.exe

    • Size

      160KB

    • MD5

      b94adc74beea6a8879fa488901a56fe3

    • SHA1

      a10510ab01f536b872e401baf331f660bae95e60

    • SHA256

      81cadf613f108486862c5f79d0e5e3a320ca433eb595f6686f7cb7478367c669

    • SHA512

      937d8849bc549afdc20c020c0dc773bb2627476ac21e27df4377ef4c582fa52ff2b32da4fd96029b505dad315a2aae853b67c03266b54f354dc341b9ff733c9d

    • SSDEEP

      3072:jOzPcXa+ND32eioGHlz8rnAE0HCXh0edLvvYMjMqqDvFfm:jOTcK+NrRioGHlz8rz0i/vzQqqDvFfm

    Score
    10/10
    netwirebotnetdiscoveryratstealer

    • NetWire RAT payload

      rat

    • Netwire

      Netwire is a RAT with main functionalities focused password stealing and keylogging, but also includes remote control capabilities as well.

      botnetstealernetwire

    • Netwire family

      netwire
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks