Overview

overview

10

Static

static

3

5de15f2a06...18.exe

windows7-x64

10

5de15f2a06...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    5de15f2a06e9fb2727c3a351164a8288_JaffaCakes118

  • Size

    195KB

  • Sample

    240520-jds18sae31

  • MD5

    5de15f2a06e9fb2727c3a351164a8288

  • SHA1

    cdf63bbe5f06e7bd663b59ee9c69c3d51666db12

  • SHA256

    cd04dc2e3ab620a174d395f2df44f5d3568762e86f1af9f00e4a27e144b2d975

  • SHA512

    3283758e7c22726f123da8adf08ef7f920463fc69f32492c0e11a264b89f45cc49386453d8a9b3c5fcdeee46e4a6e1843c7b6819922d303eda2b3176a33f2042

  • SSDEEP

    3072:bkgyzbBp52B0ym2O7kXi42TFI57Z2kgn9UnJcyBaoqBuBhh6U74AZeH4vwt3:b9Ytp52B0Taif+0UnfaoqBihh175Fa

Score
10/10
emotetepoch1bankertrojan

Malware Config

Extracted

Family

emotet

Botnet

Epoch1

C2

189.173.113.67:443

200.123.101.90:80

170.130.31.177:8080

51.255.165.160:8080

45.56.79.249:443

185.86.148.222:8080

190.4.50.26:80

187.188.166.192:80

94.177.183.28:8080

201.213.32.59:80

76.69.29.42:80

190.96.118.15:443

81.213.215.216:50000

80.85.87.122:8080

186.1.41.111:443

183.82.97.25:80

220.241.38.226:50000

14.160.93.230:80

200.58.83.179:80

138.68.106.4:7080
rsa_pubkey.plain

Targets

    • Target

      5de15f2a06e9fb2727c3a351164a8288_JaffaCakes118

    • Size

      195KB

    • MD5

      5de15f2a06e9fb2727c3a351164a8288

    • SHA1

      cdf63bbe5f06e7bd663b59ee9c69c3d51666db12

    • SHA256

      cd04dc2e3ab620a174d395f2df44f5d3568762e86f1af9f00e4a27e144b2d975

    • SHA512

      3283758e7c22726f123da8adf08ef7f920463fc69f32492c0e11a264b89f45cc49386453d8a9b3c5fcdeee46e4a6e1843c7b6819922d303eda2b3176a33f2042

    • SSDEEP

      3072:bkgyzbBp52B0ym2O7kXi42TFI57Z2kgn9UnJcyBaoqBuBhh6U74AZeH4vwt3:b9Ytp52B0Taif+0UnfaoqBihh175Fa

    Score
    10/10
    emotetepoch1bankertrojan

    • Emotet

      Emotet is a trojan that is primarily spread through spam emails.

      trojanbankeremotet

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks