Overview

overview

10

Static

static

9

31d5bc3c75...18.exe

windows7-x64

10

31d5bc3c75...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    31d5bc3c75d1573d9606a69160c1c8dc_JaffaCakes118

  • Size

    364KB

  • Sample

    240511-awnpssah7t

  • MD5

    31d5bc3c75d1573d9606a69160c1c8dc

  • SHA1

    967063b01f4703aad3ef5c1eacce2c529cd1899c

  • SHA256

    ab4c08ea8f44544dc9724bb196677561746643eba735a31d2284040077e79080

  • SHA512

    c266e7ddb921c626e561390a76c6a7efa3e9015118f5424fe745e7b154eac83a5c780d2c88f39901dda6cfc16d3559fe0bf33ce43d213eb5b24dbeb98c50a0f2

  • SSDEEP

    3072:QemGVt8GTylTmxGQHp6IRgBWnzr7HD37nnrrLnvKx/B44/Fo9uV:juEylTm/Hpnz/HXnr/vYi4/Fo

Score
10/10
emotetepoch2bankercryptonepackertrojan

Malware Config

Extracted

Family

emotet

Botnet

Epoch2

C2

45.79.188.67:8080

77.237.248.136:8080

185.142.236.163:443

190.108.228.48:990

119.15.153.237:80

31.12.67.62:7080

80.11.163.139:21

190.226.44.20:21

45.33.49.124:443

103.97.95.218:143

187.144.189.58:50000

211.63.71.72:8080

182.76.6.2:8080

138.201.140.110:8080

190.145.67.134:8090

169.239.182.217:8080

46.105.131.87:80

78.24.219.147:8080

91.205.215.66:8080

85.104.59.244:20
rsa_pubkey.plain

Targets

    • Target

      31d5bc3c75d1573d9606a69160c1c8dc_JaffaCakes118

    • Size

      364KB

    • MD5

      31d5bc3c75d1573d9606a69160c1c8dc

    • SHA1

      967063b01f4703aad3ef5c1eacce2c529cd1899c

    • SHA256

      ab4c08ea8f44544dc9724bb196677561746643eba735a31d2284040077e79080

    • SHA512

      c266e7ddb921c626e561390a76c6a7efa3e9015118f5424fe745e7b154eac83a5c780d2c88f39901dda6cfc16d3559fe0bf33ce43d213eb5b24dbeb98c50a0f2

    • SSDEEP

      3072:QemGVt8GTylTmxGQHp6IRgBWnzr7HD37nnrrLnvKx/B44/Fo9uV:juEylTm/Hpnz/HXnr/vYi4/Fo

    Score
    10/10
    emotetepoch2bankertrojan

    • Emotet

      Emotet is a trojan that is primarily spread through spam emails.

      trojanbankeremotet

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Tasks