Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    d3b242ca997b43d881a0a1d31c48d853_JaffaCakes118

  • Size

    168KB

  • Sample

    240908-gpjktszgpr

  • MD5

    d3b242ca997b43d881a0a1d31c48d853

  • SHA1

    e50365befe2e84330459f8c179b3937c57996a2e

  • SHA256

    c2cae5e87b233bad6faba106090c8bf22e023fed95da2fb05bd5b4147aa32a9f

  • SHA512

    2780dc315efc35c1a4ddacd2fe799a4a2d5b557f2c6037565ff73933ce9003f0d3e5b6356c2500ed6e70de699d7e0604c899b6c965ce9fcd0bb39b52959d6b37

  • SSDEEP

    3072:Nqwk57x9lHJMQLkWbL8hNNGTg8HrmyNFJ/ogu1pMQWqNgL4xuEQsxq:87RJMwbAhNz8LbowQWqi6LQ

Malware Config

Extracted

Family

emotet

Botnet

Epoch2

C2

67.10.155.92:80

38.111.46.46:8080

134.209.36.254:8080

162.241.242.173:8080

2.84.135.163:80

94.1.108.190:443

140.186.212.146:80

95.179.229.244:8080

200.114.213.233:8080

113.61.66.94:80

190.240.194.77:443

61.19.246.238:443

110.5.16.198:80

83.169.36.251:8080

37.187.72.193:8080

176.111.60.55:8080

85.105.205.77:8080

168.235.67.138:7080

200.123.150.89:443

87.106.139.101:8080

rsa_pubkey.plain
1
-----BEGIN PUBLIC KEY-----
2
MHwwDQYJKoZIhvcNAQEBBQADawAwaAJhANQOcBKvh5xEW7VcJ9totsjdBwuAclxS
3
Q0e09fk8V053lktpW3TRrzAW63yt6j1KWnyxMrU3igFXypBoI4lVNmkje4UPtIIS
4
fkzjEIvG1v/ZNn1k0J0PfFTxbFFeUEs3AwIDAQAB
5
-----END PUBLIC KEY-----

Targets

    • Target

      d3b242ca997b43d881a0a1d31c48d853_JaffaCakes118

    • Size

      168KB

    • MD5

      d3b242ca997b43d881a0a1d31c48d853

    • SHA1

      e50365befe2e84330459f8c179b3937c57996a2e

    • SHA256

      c2cae5e87b233bad6faba106090c8bf22e023fed95da2fb05bd5b4147aa32a9f

    • SHA512

      2780dc315efc35c1a4ddacd2fe799a4a2d5b557f2c6037565ff73933ce9003f0d3e5b6356c2500ed6e70de699d7e0604c899b6c965ce9fcd0bb39b52959d6b37

    • SSDEEP

      3072:Nqwk57x9lHJMQLkWbL8hNNGTg8HrmyNFJ/ogu1pMQWqNgL4xuEQsxq:87RJMwbAhNz8LbowQWqi6LQ

    • Emotet

      Emotet is a trojan that is primarily spread through spam emails.

    • Emotet payload

      Detects Emotet payload in memory.

MITRE ATT&CK Enterprise v15

Tasks

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.