Overview

overview

10

Static

static

3

bc55b6fa90...18.exe

windows7-x64

10

bc55b6fa90...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    bc55b6fa9064c49a78c39a74975631f7_JaffaCakes118
  • Size 616KB
  • Sample240618-rdwfcswhrd
  • SHA256 7683f77bc1a06a34b324540abb000137f75f5e79990b0ea453978eb4a207828b
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10
emotetepoch3bankertrojan

Malware Config

Extracted

Family

  • emotet

Botnet

  • Epoch3

C2

  • 72.69.99.47:80

  • 190.5.162.204:80

  • 123.142.37.165:80

  • 50.63.13.135:8080

  • 222.239.249.166:443

  • 192.161.190.171:8080

  • 80.93.48.49:7080

  • 195.201.56.68:7080

  • 181.44.166.242:80

  • 161.18.233.114:80

  • 51.38.134.203:8080

  • 212.129.14.27:8080

  • 172.90.70.168:443

  • 45.129.121.222:443

  • 189.180.105.125:443

  • 186.66.224.182:990

  • 122.11.164.183:80

  • 138.197.140.163:8080

  • 211.218.105.101:80

  • 212.112.113.235:80

rsa_pubkey.plain

Targets

    • Target
      bc55b6fa9064c49a78c39a74975631f7_JaffaCakes118
    • Size 616KB
    • SHA256 7683f77bc1a06a34b324540abb000137f75f5e79990b0ea453978eb4a207828b
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    emotetepoch3bankertrojan

    • Emotet

      Emotet is a trojan that is primarily spread through spam emails.

      trojanbankeremotet

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks