netwire | e191179f395c8d1144b579962a247e18eda1f209db9a6942ddbd931bfe4ed193 | Triage

Sharing

General

Target

JaffaCakes118_e191179f395c8d1144b579962a247e18eda1f209db9a6942ddbd931bfe4ed193
Size

204KB
Sample

241224-qd9sbaxret
MD5

7f485feba6ddb2066c52563079cf8fcb
SHA1

86dd22761e28a78b07290cfb2d54131c4bce5cba
SHA256

e191179f395c8d1144b579962a247e18eda1f209db9a6942ddbd931bfe4ed193
SHA512

012b3a29f1b5254a7f9428f167ba97b5f2532a8e078f8555d92aaea189cfea92e10c9fcf6295f4305502d6f6fc7378b131f5ccbf9f5e60470d11b48003dbddd7
SSDEEP

6144:HOmRiyqlGNDoGoll4r6Hkyaz4qqDZcsFf:hiyqly/rMky4q9R

Score

10^/10

netwire discovery rat

Malware Config

Targets

- Target
  
  JaffaCakes118_e191179f395c8d1144b579962a247e18eda1f209db9a6942ddbd931bfe4ed193
- Size
  
  204KB
- MD5
  
  7f485feba6ddb2066c52563079cf8fcb
- SHA1
  
  86dd22761e28a78b07290cfb2d54131c4bce5cba
- SHA256
  
  e191179f395c8d1144b579962a247e18eda1f209db9a6942ddbd931bfe4ed193
- SHA512
  
  012b3a29f1b5254a7f9428f167ba97b5f2532a8e078f8555d92aaea189cfea92e10c9fcf6295f4305502d6f6fc7378b131f5ccbf9f5e60470d11b48003dbddd7
- SSDEEP
  
  6144:HOmRiyqlGNDoGoll4r6Hkyaz4qqDZcsFf:hiyqly/rMky4q9R
Score

3^/10

discovery
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2