General
-
Target
0a08602efb740e0feca73ef6c7ea3515_JaffaCakes118
-
Size
448KB
-
Sample
240430-slbatsbe94
-
MD5
0a08602efb740e0feca73ef6c7ea3515
-
SHA1
0138127e4fa6132aad032d8903a0dfeb690d4282
-
SHA256
e5dd75a605e566d5216d8f9d7d5203cc3f059c4e23431c325ea57e0d402fa5e2
-
SHA512
c768105b86e5867edf3377310b2e37bee91ae7966a71b61c08f62f8f9c71ddac260e8100919c7d6d9148d47f873f7f076a7d2dbfddd92e3d33dc06c2b395dfdf
-
SSDEEP
12288:efzaBuiszJbE9mO4sl9kVlAOyQkNvOzxMrB:ebMmO4sl9sR2Otq
Malware Config
Extracted
emotet
Epoch2
75.139.38.211:80
69.30.203.214:8080
67.205.85.243:8080
190.160.53.126:80
183.101.175.193:80
137.59.187.107:8080
168.235.67.138:7080
209.143.35.232:80
180.92.239.110:8080
167.86.90.214:8080
85.66.181.138:80
95.213.236.64:8080
83.169.36.251:8080
157.245.99.39:8080
79.98.24.39:8080
70.167.215.250:8080
93.51.50.171:8080
174.102.48.180:80
24.179.13.119:80
41.60.200.34:80
Targets
-
-
Target
0a08602efb740e0feca73ef6c7ea3515_JaffaCakes118
-
Size
448KB
-
MD5
0a08602efb740e0feca73ef6c7ea3515
-
SHA1
0138127e4fa6132aad032d8903a0dfeb690d4282
-
SHA256
e5dd75a605e566d5216d8f9d7d5203cc3f059c4e23431c325ea57e0d402fa5e2
-
SHA512
c768105b86e5867edf3377310b2e37bee91ae7966a71b61c08f62f8f9c71ddac260e8100919c7d6d9148d47f873f7f076a7d2dbfddd92e3d33dc06c2b395dfdf
-
SSDEEP
12288:efzaBuiszJbE9mO4sl9kVlAOyQkNvOzxMrB:ebMmO4sl9sR2Otq
Score10/10-
Emotet
Emotet is a trojan that is primarily spread through spam emails.
-
Emotet payload
Detects Emotet payload in memory.
-