General
-
Target
dec612e61e4da41ce1216a1a5591f9b1_JaffaCakes118
-
Size
617KB
-
Sample
240913-ycx15avdjq
-
MD5
dec612e61e4da41ce1216a1a5591f9b1
-
SHA1
9d8eac85f0467b1f1466c21f256e9d7141bd0c41
-
SHA256
f07873861be1a536391b77164ff86afad520a29ab8e18321f66e84787564f46c
-
SHA512
81003cd3bcc828c676c5909146e6d1562f280e1a1dd4daa43cd6ce6dce89f0ce51b9a10c9b54923ecd4d3b2bff7b67e3437cd3c235f3b017314d8cc7ec089871
-
SSDEEP
12288:OYzchQVZnkmt/70MWugxPJZFpf0c1pHwbdJ8CA88fzsBsI3+Dc:B4KV5Hpt8bZHLI+CSfasO+
Malware Config
Extracted
emotet
Epoch1
84.232.229.24:80
51.255.203.164:8080
217.160.169.110:8080
185.183.16.47:80
190.45.24.210:80
187.162.248.237:80
93.146.143.191:80
185.94.252.27:443
143.0.85.206:7080
80.15.100.37:80
85.105.239.184:443
94.176.234.118:443
62.84.75.50:80
137.74.106.111:7080
172.104.169.32:8080
46.105.114.137:8080
94.126.8.1:80
78.206.229.130:80
93.149.120.214:80
192.175.111.212:7080
Targets
-
-
Target
dec612e61e4da41ce1216a1a5591f9b1_JaffaCakes118
-
Size
617KB
-
MD5
dec612e61e4da41ce1216a1a5591f9b1
-
SHA1
9d8eac85f0467b1f1466c21f256e9d7141bd0c41
-
SHA256
f07873861be1a536391b77164ff86afad520a29ab8e18321f66e84787564f46c
-
SHA512
81003cd3bcc828c676c5909146e6d1562f280e1a1dd4daa43cd6ce6dce89f0ce51b9a10c9b54923ecd4d3b2bff7b67e3437cd3c235f3b017314d8cc7ec089871
-
SSDEEP
12288:OYzchQVZnkmt/70MWugxPJZFpf0c1pHwbdJ8CA88fzsBsI3+Dc:B4KV5Hpt8bZHLI+CSfasO+
Score10/10-
Emotet
Emotet is a trojan that is primarily spread through spam emails.
-
Blocklisted process makes network request
-