General
-
Target
80bf1f1227dd58ed1738c163dc9b2b44_JaffaCakes118
-
Size
536KB
-
Sample
240529-prvd4sed6s
-
MD5
80bf1f1227dd58ed1738c163dc9b2b44
-
SHA1
3816f4125718918b135c7531e9f296fd0f74d1d0
-
SHA256
e92048605c15b719712538b7752cb78b6355958dfa5e8cae98f1fed26148fcc0
-
SHA512
23dc3a8c873a8c477ebc2792215964d0b98b647dba929fc24f9412b13a35553289bee5d54ca396f4dfa34199845603a1d0ee47abd4af9a5aef5abfe462d1e15e
-
SSDEEP
6144:m5B/k88jWYB5wdZskfKh7iNtjvruh9BkrLmlGmgK:c/k85OGekfkyvruBk/m8mg
Static task
static1
Behavioral task
behavioral1
Sample
80bf1f1227dd58ed1738c163dc9b2b44_JaffaCakes118.exe
Resource
win7-20240419-en
Malware Config
Extracted
emotet
Epoch3
187.131.163.89:7080
85.104.121.33:8443
124.150.175.133:80
198.57.217.170:8080
45.56.122.75:80
138.197.140.163:8080
157.7.164.178:8081
181.36.42.205:443
212.112.113.235:80
185.45.24.254:7080
144.76.62.10:8080
201.196.15.79:990
94.177.253.126:80
113.52.135.33:7080
189.218.243.150:443
190.217.1.149:80
190.55.39.215:80
187.143.219.242:8080
186.146.110.108:8080
42.190.4.92:443
152.170.220.95:80
172.104.70.207:8080
181.198.203.45:443
190.113.146.128:8080
192.241.220.183:8080
186.84.173.153:80
190.228.212.165:50000
181.61.143.177:80
5.189.148.98:8080
176.58.93.123:80
190.117.206.153:443
189.166.13.109:80
216.70.88.55:8080
186.109.91.136:80
190.96.118.15:443
75.154.163.1:8090
91.109.5.28:8080
51.38.134.203:8080
138.186.179.235:8080
216.75.37.196:8080
70.45.30.28:80
178.249.187.150:7080
189.147.96.184:443
143.95.101.72:8080
83.169.33.157:8080
189.132.130.111:8080
139.162.185.116:443
96.20.84.254:7080
181.47.235.26:993
154.120.227.206:8080
200.55.168.82:20
162.241.134.130:8080
190.16.101.10:80
211.229.116.130:80
181.197.2.80:443
200.90.86.170:8080
187.188.166.192:80
60.52.64.122:80
70.32.94.58:8080
110.36.234.146:80
190.13.146.47:443
203.99.188.11:443
95.216.207.86:7080
23.253.207.142:8080
Targets
-
-
Target
80bf1f1227dd58ed1738c163dc9b2b44_JaffaCakes118
-
Size
536KB
-
MD5
80bf1f1227dd58ed1738c163dc9b2b44
-
SHA1
3816f4125718918b135c7531e9f296fd0f74d1d0
-
SHA256
e92048605c15b719712538b7752cb78b6355958dfa5e8cae98f1fed26148fcc0
-
SHA512
23dc3a8c873a8c477ebc2792215964d0b98b647dba929fc24f9412b13a35553289bee5d54ca396f4dfa34199845603a1d0ee47abd4af9a5aef5abfe462d1e15e
-
SSDEEP
6144:m5B/k88jWYB5wdZskfKh7iNtjvruh9BkrLmlGmgK:c/k85OGekfkyvruBk/m8mg
-
Drops file in System32 directory
-