Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    59d5c0a370ea92ffafde94d46f833696_JaffaCakes118

  • Size

    95KB

  • Sample

    240729-xme3mavcmm

  • MD5

    59d5c0a370ea92ffafde94d46f833696

  • SHA1

    59dbaebd1095a1b68e3d3551203d042addaf7fd2

  • SHA256

    dd08b54842abecfedc7625707600fcf964563f0ffd7effa7bbabae96f1fdbd69

  • SHA512

    bb31fc3634def6033495c33aaefaa2eb40a33c473eb84a5f61b002753663718dd43aaa29ec741ac18cae76e819f8600d7db5ecbf017fec2df7ae31321689558f

  • SSDEEP

    1536:L5qy5eV2+suXluCTZwmO/i2Q0mMx8ot+doa/7/vRoTIqaroBz0RoQ1eN:tq+KzXQCTZlO/vRyc+T+mw4RoQ1o

Malware Config

Extracted

Family

emotet

Botnet

Epoch2

C2

38.18.235.242:80

5.196.108.189:8080

121.124.124.40:7080

104.236.246.93:8080

113.61.66.94:80

120.150.60.189:80

91.211.88.52:7080

47.144.21.12:443

108.46.29.236:80

139.162.108.71:8080

134.209.36.254:8080

139.59.60.244:8080

66.65.136.14:80

76.175.162.101:80

174.106.122.139:80

95.213.236.64:8080

174.45.13.118:80

50.35.17.13:80

209.141.54.221:8080

87.106.139.101:8080

rsa_pubkey.plain
1
-----BEGIN PUBLIC KEY-----
2
MHwwDQYJKoZIhvcNAQEBBQADawAwaAJhANQOcBKvh5xEW7VcJ9totsjdBwuAclxS
3
Q0e09fk8V053lktpW3TRrzAW63yt6j1KWnyxMrU3igFXypBoI4lVNmkje4UPtIIS
4
fkzjEIvG1v/ZNn1k0J0PfFTxbFFeUEs3AwIDAQAB
5
-----END PUBLIC KEY-----

Targets

    • Target

      59d5c0a370ea92ffafde94d46f833696_JaffaCakes118

    • Size

      95KB

    • MD5

      59d5c0a370ea92ffafde94d46f833696

    • SHA1

      59dbaebd1095a1b68e3d3551203d042addaf7fd2

    • SHA256

      dd08b54842abecfedc7625707600fcf964563f0ffd7effa7bbabae96f1fdbd69

    • SHA512

      bb31fc3634def6033495c33aaefaa2eb40a33c473eb84a5f61b002753663718dd43aaa29ec741ac18cae76e819f8600d7db5ecbf017fec2df7ae31321689558f

    • SSDEEP

      1536:L5qy5eV2+suXluCTZwmO/i2Q0mMx8ot+doa/7/vRoTIqaroBz0RoQ1eN:tq+KzXQCTZlO/vRyc+T+mw4RoQ1o

    • Emotet

      Emotet is a trojan that is primarily spread through spam emails.

    • Emotet payload

      Detects Emotet payload in memory.

MITRE ATT&CK Enterprise v15

Tasks

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.