General
-
Target
73ebcd76d36f6f476da7d631a3dcbe97_JaffaCakes118
-
Size
104KB
-
Sample
240526-bxa1rsaf53
-
MD5
73ebcd76d36f6f476da7d631a3dcbe97
-
SHA1
40c81b3b33d0f43036cb4a06b7b1228d185cf418
-
SHA256
8d126ba5117e6452e53752794c59275266761895bb9278341d20b8e75046522e
-
SHA512
161a1d036acb0428db825a2d1f0e196d5282df07111fa2e3b2b6f24602909f379e04dbac6e783427a423563919dba3d414b4873c480e7bc3e73c2eea583b52aa
-
SSDEEP
3072:iNOlUI7W7YwweSGXAhg5domGX9LpV049iBVBJ53Mj:AwUIyFwev5ddGNVe49M7Lm
Malware Config
Extracted
emotet
Epoch3
115.176.16.221:80
45.79.16.230:7080
145.239.169.32:7080
190.85.46.52:7080
180.26.62.115:443
179.5.118.12:80
189.160.188.97:80
5.79.70.250:8080
126.126.139.26:443
41.84.243.145:80
79.133.6.236:8080
139.59.12.63:8080
95.216.205.155:8080
45.177.120.37:8080
54.38.143.245:8080
157.7.164.178:8081
41.212.89.128:80
50.116.78.109:8080
75.127.14.170:8080
49.243.9.118:80
Targets
-
-
Target
73ebcd76d36f6f476da7d631a3dcbe97_JaffaCakes118
-
Size
104KB
-
MD5
73ebcd76d36f6f476da7d631a3dcbe97
-
SHA1
40c81b3b33d0f43036cb4a06b7b1228d185cf418
-
SHA256
8d126ba5117e6452e53752794c59275266761895bb9278341d20b8e75046522e
-
SHA512
161a1d036acb0428db825a2d1f0e196d5282df07111fa2e3b2b6f24602909f379e04dbac6e783427a423563919dba3d414b4873c480e7bc3e73c2eea583b52aa
-
SSDEEP
3072:iNOlUI7W7YwweSGXAhg5domGX9LpV049iBVBJ53Mj:AwUIyFwev5ddGNVe49M7Lm
Score10/10-
Emotet
Emotet is a trojan that is primarily spread through spam emails.
-
Emotet payload
Detects Emotet payload in memory.
-