General
-
Target
79d9079155ff18828006f59bf37af4d6_JaffaCakes118
-
Size
632KB
-
Sample
240527-vl491scb28
-
MD5
79d9079155ff18828006f59bf37af4d6
-
SHA1
665cdeb7a6d7e84daa77e16a8e279e55b2ad35ed
-
SHA256
c476c9f4d78bd80999b505b1b386716f6250a8a9c2ab37b16c69d030309f5a04
-
SHA512
b4958502baeacd0549f12cc25b6dc0e4ae48c8351e83e88834beba18d8f53be3918c756dd961b172a8000a2e626263b24b7b4e67fa89e5f9944674dd65a3303f
-
SSDEEP
12288:yCjBePRPHFPikH0+IQmOZJ6+Px7ZSp5LPHJ:2PdikU+IQ1Zt7ZsPHJ
Malware Config
Extracted
emotet
Epoch3
186.109.104.67:80
185.86.148.68:443
139.99.157.213:8080
105.213.67.88:80
190.53.144.120:80
203.153.216.182:7080
81.214.253.80:443
195.201.56.70:8080
201.213.177.139:80
31.146.61.34:80
177.144.130.105:443
92.24.51.238:80
197.83.232.19:80
105.209.235.113:8080
188.0.135.237:80
176.9.93.82:7080
190.164.75.175:80
188.251.213.180:443
87.106.231.60:8080
113.161.148.81:80
Targets
-
-
Target
79d9079155ff18828006f59bf37af4d6_JaffaCakes118
-
Size
632KB
-
MD5
79d9079155ff18828006f59bf37af4d6
-
SHA1
665cdeb7a6d7e84daa77e16a8e279e55b2ad35ed
-
SHA256
c476c9f4d78bd80999b505b1b386716f6250a8a9c2ab37b16c69d030309f5a04
-
SHA512
b4958502baeacd0549f12cc25b6dc0e4ae48c8351e83e88834beba18d8f53be3918c756dd961b172a8000a2e626263b24b7b4e67fa89e5f9944674dd65a3303f
-
SSDEEP
12288:yCjBePRPHFPikH0+IQmOZJ6+Px7ZSp5LPHJ:2PdikU+IQ1Zt7ZsPHJ
Score10/10-
Emotet
Emotet is a trojan that is primarily spread through spam emails.
-
Emotet payload
Detects Emotet payload in memory.
-