Overview

overview

10

Static

static

3

b50be0db6e...18.exe

windows7-x64

10

b50be0db6e...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    b50be0db6ed78d6b0f7ff6aef510f3a9_JaffaCakes118

  • Size

    206KB

  • Sample

    240616-y8hlbawflf

  • MD5

    b50be0db6ed78d6b0f7ff6aef510f3a9

  • SHA1

    3e4fe28ffbae748a5d92a639c68f5145309d07e5

  • SHA256

    063f436837f673c3e9655628cf63ad0aa6b1078335f219f5d168a3591223810a

  • SHA512

    af8c9f01b298712797f4497aef99145c618d129fb6beb92523c8e1bb2c9cab751cdee0ec51f27d5ae9f2ba53e2e59a7e9a47334911c86f515a9cf7f9f79ba4da

  • SSDEEP

    3072:lOz1rBhkQYQe++Ti7BYkTQTR/Kw1D15It5kE6uKr30qwwvCFUla2+UsSYQ:qrBhkQYX6ETpf/I71A3zwwcUla2+UD

Score
10/10
emotetepoch1bankertrojan

Malware Config

Extracted

Family

emotet

Botnet

Epoch1

C2

94.67.21.187:8080

181.231.62.54:80

170.130.31.177:8080

51.255.165.160:8080

45.56.79.249:443

200.113.106.18:80

41.75.135.93:7080

87.106.77.40:7080

79.143.182.254:8080

60.52.64.122:80

45.79.95.107:443

51.15.8.192:8080

94.183.71.206:7080

159.203.204.126:8080

62.75.160.178:8080

42.190.4.92:443

149.62.173.247:8080

79.127.57.43:80

91.205.215.57:7080

46.28.111.142:7080
rsa_pubkey.plain

Targets

    • Target

      b50be0db6ed78d6b0f7ff6aef510f3a9_JaffaCakes118

    • Size

      206KB

    • MD5

      b50be0db6ed78d6b0f7ff6aef510f3a9

    • SHA1

      3e4fe28ffbae748a5d92a639c68f5145309d07e5

    • SHA256

      063f436837f673c3e9655628cf63ad0aa6b1078335f219f5d168a3591223810a

    • SHA512

      af8c9f01b298712797f4497aef99145c618d129fb6beb92523c8e1bb2c9cab751cdee0ec51f27d5ae9f2ba53e2e59a7e9a47334911c86f515a9cf7f9f79ba4da

    • SSDEEP

      3072:lOz1rBhkQYQe++Ti7BYkTQTR/Kw1D15It5kE6uKr30qwwvCFUla2+UsSYQ:qrBhkQYX6ETpf/I71A3zwwcUla2+UD

    Score
    10/10
    emotetepoch1bankertrojan

    • Emotet

      Emotet is a trojan that is primarily spread through spam emails.

      trojanbankeremotet

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks