Overview

overview

10

Static

static

3

dc9c8d5202...18.exe

windows7-x64

10

dc9c8d5202...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    dc9c8d5202f4304fb41f9f0d766e2a33_JaffaCakes118

  • Size

    344KB

  • Sample

    240912-ty711atdrl

  • MD5

    dc9c8d5202f4304fb41f9f0d766e2a33

  • SHA1

    5d36c2bc2f8de1eaf83e6130dc10006097f49cb6

  • SHA256

    d26538ca90d44da41d8544aa4acab13aebfa7cc20cfce45f2185d3447ac4dd67

  • SHA512

    17799f246711432001f266427e6d97991c1aa3c0af962be49bb50fb3c318bf54c6daf1afa2eb0f613340190a2359af8d576d5b698e5c2db4d721df45b64c0161

  • SSDEEP

    6144:eigTTOKYyDCJPXskJ+EX+/lAAgVH4xckmh1Zf5MiSi8kW:eigTTOnyDQvp+U+/sFkmPZiGW

Score
10/10
emotetepoch2bankerdiscoverytrojan

Malware Config

Extracted

Family

emotet

Botnet

Epoch2

C2

185.234.72.64:443

51.68.220.244:8080

206.81.10.215:8080

206.189.112.148:8080

200.71.148.138:8080

192.81.213.192:8080

189.209.217.49:80

190.53.135.159:21

115.78.95.230:443

94.192.228.255:80

190.147.215.53:22

31.12.67.62:7080

31.31.77.83:443

50.116.86.205:8080

80.11.163.139:21

211.63.71.72:8080

104.131.11.150:8080

103.39.131.88:80

90.77.228.193:8090

46.105.131.87:80
rsa_pubkey.plain

Targets

    • Target

      dc9c8d5202f4304fb41f9f0d766e2a33_JaffaCakes118

    • Size

      344KB

    • MD5

      dc9c8d5202f4304fb41f9f0d766e2a33

    • SHA1

      5d36c2bc2f8de1eaf83e6130dc10006097f49cb6

    • SHA256

      d26538ca90d44da41d8544aa4acab13aebfa7cc20cfce45f2185d3447ac4dd67

    • SHA512

      17799f246711432001f266427e6d97991c1aa3c0af962be49bb50fb3c318bf54c6daf1afa2eb0f613340190a2359af8d576d5b698e5c2db4d721df45b64c0161

    • SSDEEP

      6144:eigTTOKYyDCJPXskJ+EX+/lAAgVH4xckmh1Zf5MiSi8kW:eigTTOnyDQvp+U+/sFkmPZiGW

    Score
    10/10
    emotetepoch2bankerdiscoverytrojan

    • Emotet

      Emotet is a trojan that is primarily spread through spam emails.

      trojanbankeremotet

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks