netwire | 496c02120d5afc643678137e87a15cbc0bc801a6c7b6d00368968932a163da4f | Triage

Sharing

General

Target

JaffaCakes118_496c02120d5afc643678137e87a15cbc0bc801a6c7b6d00368968932a163da4f
Size

204KB
Sample

241225-gs1crazmfj
MD5

069dbe5c56b0e8e692b2088b196146ef
SHA1

8b5d04065ab8a4b0064aed58722b5592b6d1c5f6
SHA256

496c02120d5afc643678137e87a15cbc0bc801a6c7b6d00368968932a163da4f
SHA512

8bbc15a6ed131e0cf5f227740f8cd00b207b6239f50c70e4ee5384aec9da6f4122aeacd5b99bb6131fedcaa3e260bcc7b60abd488f22d3ad0285e550fa770998
SSDEEP

3072:S3bwUUCZjY/UURTbaiceGUlzFr0qOnZEcsx8VLJmYMSMqqD:S3kUjJY/fRT+iceGUlzFruZdJmzxqqD

Score

10^/10

netwire discovery rat

Malware Config

Targets

- Target
  
  JaffaCakes118_496c02120d5afc643678137e87a15cbc0bc801a6c7b6d00368968932a163da4f
- Size
  
  204KB
- MD5
  
  069dbe5c56b0e8e692b2088b196146ef
- SHA1
  
  8b5d04065ab8a4b0064aed58722b5592b6d1c5f6
- SHA256
  
  496c02120d5afc643678137e87a15cbc0bc801a6c7b6d00368968932a163da4f
- SHA512
  
  8bbc15a6ed131e0cf5f227740f8cd00b207b6239f50c70e4ee5384aec9da6f4122aeacd5b99bb6131fedcaa3e260bcc7b60abd488f22d3ad0285e550fa770998
- SSDEEP
  
  3072:S3bwUUCZjY/UURTbaiceGUlzFr0qOnZEcsx8VLJmYMSMqqD:S3kUjJY/fRT+iceGUlzFruZdJmzxqqD
Score

3^/10

discovery
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2