Overview

overview

10

Static

static

3

JaffaCakes...a9.exe

windows7-x64

10

JaffaCakes...a9.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_30709978630bbebb777285c9584d82a9

  • Size

    5.0MB

  • Sample

    250106-vxr4tssmbz

  • MD5

    30709978630bbebb777285c9584d82a9

  • SHA1

    efd14ec057e166421a9ab782eaa58dbed302b75e

  • SHA256

    91eaf12b91f887f6fb87ade183636fca19b9aef9db042c21c11e11e38da33153

  • SHA512

    824d6bdd6940b0f71f60c831199c5eccde02a078ea3aae2c69bc75de3e068c7c6be785308384116f95e23adaea4b44478ce830de9f65333758cc57c7d60d3f3c

  • SSDEEP

    49152:c/wcQ1T/P1QqeYTGCYn9szAF00ovZUBYQpwdVUdHWyla54JELdyvzFIi7R9TOQah:c/wZmoGC/ZxF/sXeNgZguYm/dkvm/dU

Score
10/10
netwirebotnetdiscoveryratstealer

Malware Config

Extracted

Family

netwire

C2

bazerasedazacnetw139.xyz:2010

Attributes
  • activex_autorun

    false

  • copy_executable

    false

  • delete_original

    false

  • host_id

    Diabolikk66

  • lock_executable

    false

  • mutex

    CPsxxpUm

  • offline_keylogger

    false

  • password

    Ildiablo9012

  • registry_autorun

    false

  • use_mutex

    true

Targets

    • Target

      JaffaCakes118_30709978630bbebb777285c9584d82a9

    • Size

      5.0MB

    • MD5

      30709978630bbebb777285c9584d82a9

    • SHA1

      efd14ec057e166421a9ab782eaa58dbed302b75e

    • SHA256

      91eaf12b91f887f6fb87ade183636fca19b9aef9db042c21c11e11e38da33153

    • SHA512

      824d6bdd6940b0f71f60c831199c5eccde02a078ea3aae2c69bc75de3e068c7c6be785308384116f95e23adaea4b44478ce830de9f65333758cc57c7d60d3f3c

    • SSDEEP

      49152:c/wcQ1T/P1QqeYTGCYn9szAF00ovZUBYQpwdVUdHWyla54JELdyvzFIi7R9TOQah:c/wZmoGC/ZxF/sXeNgZguYm/dkvm/dU

    Score
    10/10
    netwirebotnetdiscoveryratstealer

    • NetWire RAT payload

      rat

    • Netwire

      Netwire is a RAT with main functionalities focused password stealing and keylogging, but also includes remote control capabilities as well.

      botnetstealernetwire

    • Netwire family

      netwire
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks