netwire | 1c4d465ee6e65d5df934b379d0a14bfd40c82b5ca93ded10b4520de60dd2d2a5 | Triage

Sharing

General

Target

JaffaCakes118_1c4d465ee6e65d5df934b379d0a14bfd40c82b5ca93ded10b4520de60dd2d2a5
Size

204KB
Sample

241229-cvpltazjex
MD5

5161205f7571cc25c231fbd2c188e588
SHA1

2b8c982e7487745f48896cb2af00716f688f8cc7
SHA256

1c4d465ee6e65d5df934b379d0a14bfd40c82b5ca93ded10b4520de60dd2d2a5
SHA512

c8b49cb1f8fe8652837f4769f53d809acf9f2a878010f9273ba8c62e3f6aa08236d5ea78a24152ba5f6ac6900b7b11d7f7b97207487b654baadd911104041987
SSDEEP

3072:jOzPcXa+ND32eioGHlz8rnAE0HCXh0edLvEYMjMqqDC+Ff:jOTcK+NrRioGHlz8rz0i/EzQqqDC+Ff

Score

10^/10

netwire discovery rat

Malware Config

Targets

- Target
  
  JaffaCakes118_1c4d465ee6e65d5df934b379d0a14bfd40c82b5ca93ded10b4520de60dd2d2a5
- Size
  
  204KB
- MD5
  
  5161205f7571cc25c231fbd2c188e588
- SHA1
  
  2b8c982e7487745f48896cb2af00716f688f8cc7
- SHA256
  
  1c4d465ee6e65d5df934b379d0a14bfd40c82b5ca93ded10b4520de60dd2d2a5
- SHA512
  
  c8b49cb1f8fe8652837f4769f53d809acf9f2a878010f9273ba8c62e3f6aa08236d5ea78a24152ba5f6ac6900b7b11d7f7b97207487b654baadd911104041987
- SSDEEP
  
  3072:jOzPcXa+ND32eioGHlz8rnAE0HCXh0edLvEYMjMqqDC+Ff:jOTcK+NrRioGHlz8rz0i/EzQqqDC+Ff
Score

3^/10

discovery
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2