Overview

overview

10

Static

static

3

jaffacakes...wn.exe

windows10-2004-x64

10

jaffacakes...wn.exe

windows11-ltsc_2024-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    jaffacakes118_Trojan.Win32.Cutwail.wwn.1cf9122e2e036e9ab8475ac5ccf468ed
  • Size 304KB
  • Sample261018-zzlr2sax71
  • SHA256 aaf89a4594696686191e6930aaacd16c58dea24e6705362361b94d3e81207e56
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
cutwailbotnetdiscoverypersistence

Malware Config

Targets

    • Target
      jaffacakes118_Trojan.Win32.Cutwail.wwn.1cf9122e2e036e9ab8475ac5ccf468ed
    • Size 304KB
    • SHA256 aaf89a4594696686191e6930aaacd16c58dea24e6705362361b94d3e81207e56
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    10/10
    botnetdiscoverycutwailpersistence

    • Detects Cutwail botnet

    • Family: Cutwail

      Cutwail is a botnet first seen in 2007.

      botnetcutwail

    • Executes dropped EXE

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v16

Tasks