Overview

overview

10

Static

static

3

2d8ab986ae...18.exe

windows7-x64

10

2d8ab986ae...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2d8ab986aeface8990ab4375568d8464_JaffaCakes118

  • Size

    425KB

  • Sample

    240510-fzxd1agf24

  • MD5

    2d8ab986aeface8990ab4375568d8464

  • SHA1

    4e21804a95ebfc99ef059be47daf666128eb214c

  • SHA256

    85192fc2b62a0d4795eaa7be29ac834dc3963e4fcf6616cb33ad36787ebf1230

  • SHA512

    3f0bbde5eedf065be870dc8fdd9dcdbe1dead9752e5d5fcd35de3ab63f08d9f44c93eb614f922289b36914f1f8d4814eb505100b2f99d666ac82cbe6f888f649

  • SSDEEP

    6144:U+1SOT3qLavbVUGXjDsDaKaIwLnhc/WGLeGFL7b11UOOKmgyyyyyyyyyyyyyyyyV:jCGXqzacuGfFXUOjmIDi+9Rv

Score
10/10
emotetepoch2bankertrojan

Malware Config

Extracted

Family

emotet

Botnet

Epoch2

C2

167.99.105.223:7080

176.31.200.130:8080

212.129.24.79:8080

37.187.2.199:443

198.199.114.69:8080

91.205.215.66:8080

190.145.67.134:8090

104.131.11.150:8080

67.225.229.55:8080

167.71.10.37:8080

138.201.140.110:8080

185.187.198.15:80

87.230.19.21:8080

185.94.252.13:443

190.53.135.159:21

87.106.139.101:8080

173.249.47.77:8080

169.239.182.217:8080

133.167.80.63:7080

92.222.216.44:8080
rsa_pubkey.plain

Targets

    • Target

      2d8ab986aeface8990ab4375568d8464_JaffaCakes118

    • Size

      425KB

    • MD5

      2d8ab986aeface8990ab4375568d8464

    • SHA1

      4e21804a95ebfc99ef059be47daf666128eb214c

    • SHA256

      85192fc2b62a0d4795eaa7be29ac834dc3963e4fcf6616cb33ad36787ebf1230

    • SHA512

      3f0bbde5eedf065be870dc8fdd9dcdbe1dead9752e5d5fcd35de3ab63f08d9f44c93eb614f922289b36914f1f8d4814eb505100b2f99d666ac82cbe6f888f649

    • SSDEEP

      6144:U+1SOT3qLavbVUGXjDsDaKaIwLnhc/WGLeGFL7b11UOOKmgyyyyyyyyyyyyyyyyV:jCGXqzacuGfFXUOjmIDi+9Rv

    Score
    10/10
    emotetepoch2bankertrojan

    • Emotet

      Emotet is a trojan that is primarily spread through spam emails.

      trojanbankeremotet

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks