General
-
Target
9167864ec92e979840687dd304e5f72e_JaffaCakes118
-
Size
688KB
-
Sample
240603-l8kdpacb92
-
MD5
9167864ec92e979840687dd304e5f72e
-
SHA1
91ee728a26503a6cc5bb9741e18d2b1bb2bb1074
-
SHA256
8d0bc22ec27265b6d7cf1712cf94331831d25c5859d32f6048a3de472caa56e1
-
SHA512
ac6f70a360d8473dc20dd356a838e72eef934ed4e8b970365dc6d103ce9923cc6dedf6de87b5cce07ed7764e0f887485aeee4e2762ffce6bbb4726e00f9fcd1e
-
SSDEEP
12288:oXz2U60rdzO9aD+viCT+RMGetwifr4whf3t70m/y:gOFviClGet8SAm/y
Malware Config
Extracted
emotet
Epoch2
47.146.32.175:80
212.51.142.238:8080
200.55.243.138:8080
65.111.120.223:80
47.144.21.12:443
81.2.235.111:8080
152.168.248.128:443
24.43.99.75:80
114.146.222.200:80
50.116.86.205:8080
121.124.124.40:7080
153.126.210.205:7080
183.101.175.193:80
189.212.199.126:443
62.75.141.82:80
46.105.131.79:8080
104.236.246.93:8080
83.110.223.58:443
162.241.92.219:8080
180.92.239.110:8080
Targets
-
-
Target
9167864ec92e979840687dd304e5f72e_JaffaCakes118
-
Size
688KB
-
MD5
9167864ec92e979840687dd304e5f72e
-
SHA1
91ee728a26503a6cc5bb9741e18d2b1bb2bb1074
-
SHA256
8d0bc22ec27265b6d7cf1712cf94331831d25c5859d32f6048a3de472caa56e1
-
SHA512
ac6f70a360d8473dc20dd356a838e72eef934ed4e8b970365dc6d103ce9923cc6dedf6de87b5cce07ed7764e0f887485aeee4e2762ffce6bbb4726e00f9fcd1e
-
SSDEEP
12288:oXz2U60rdzO9aD+viCT+RMGetwifr4whf3t70m/y:gOFviClGet8SAm/y
Score10/10-
Emotet
Emotet is a trojan that is primarily spread through spam emails.
-
Emotet payload
Detects Emotet payload in memory.
-