General
-
Target
a08f316f64a672b12e4bd53d9ff8f9a6_JaffaCakes118
-
Size
211KB
-
Sample
240612-nx9wbatcph
-
MD5
a08f316f64a672b12e4bd53d9ff8f9a6
-
SHA1
3fb0ad9801006cf5d0cba7108a6bda511d3fda50
-
SHA256
ef69021e812d47672a5e4d551b0f601102c4c5d5b470e3ca875c82fd0f02bb0f
-
SHA512
f190c5ca9d0931176ab2bb7f331ee7c72cdd6d725fed88dc1d09546dd78a8445ad8f81c3b98e02985b25c574d49179fc70abbe579cb83157c8cc8d2c0d8fa7be
-
SSDEEP
3072:45bDvHZw/mIkCtt/Qzb+HTpjweJ2Jxd6PvnKnPbpfuDgZHoUKZ9GFx:4BzHZtI/QqJHJ2zqvIZuD2HoUKZ9G
Static task
static1
Behavioral task
behavioral1
Sample
a08f316f64a672b12e4bd53d9ff8f9a6_JaffaCakes118.exe
Resource
win7-20240611-en
Malware Config
Extracted
emotet
Epoch3
173.249.157.58:8080
91.109.5.28:8080
108.179.216.46:8080
70.45.30.28:80
51.38.134.203:8080
181.97.70.132:8080
203.99.182.135:443
176.58.93.123:80
95.216.207.86:7080
200.114.134.8:20
138.197.140.163:8080
212.112.113.235:80
192.241.220.183:8080
94.177.253.126:80
186.10.16.244:53
181.57.102.203:8080
190.55.86.138:8443
93.78.205.196:443
181.53.252.85:990
110.36.234.146:80
201.196.15.79:990
80.227.67.18:20
216.70.88.55:8080
178.249.187.150:7080
139.59.242.76:8080
125.99.61.162:7080
190.13.146.47:443
201.244.125.210:995
78.109.34.178:443
143.95.101.72:8080
186.139.205.130:21
78.189.94.99:8443
181.231.62.54:80
83.169.33.157:8080
181.230.126.152:8090
181.113.229.139:990
5.189.148.98:8080
113.52.135.33:7080
41.60.202.26:22
Targets
-
-
Target
a08f316f64a672b12e4bd53d9ff8f9a6_JaffaCakes118
-
Size
211KB
-
MD5
a08f316f64a672b12e4bd53d9ff8f9a6
-
SHA1
3fb0ad9801006cf5d0cba7108a6bda511d3fda50
-
SHA256
ef69021e812d47672a5e4d551b0f601102c4c5d5b470e3ca875c82fd0f02bb0f
-
SHA512
f190c5ca9d0931176ab2bb7f331ee7c72cdd6d725fed88dc1d09546dd78a8445ad8f81c3b98e02985b25c574d49179fc70abbe579cb83157c8cc8d2c0d8fa7be
-
SSDEEP
3072:45bDvHZw/mIkCtt/Qzb+HTpjweJ2Jxd6PvnKnPbpfuDgZHoUKZ9GFx:4BzHZtI/QqJHJ2zqvIZuD2HoUKZ9G
-
Drops file in System32 directory
-