General

  • Target

    e172f09767597e2b47bd89e83836141e_JaffaCakes118

  • Size

    95KB

  • Sample

    240915-b136qaygkc

  • MD5

    e172f09767597e2b47bd89e83836141e

  • SHA1

    fdfb280b57c4893cc615574361be8fb04f23602b

  • SHA256

    ae30e74e62d6c4b63d8e8e0f39be9de17a61591d53931662ec6f95bd7be20ca3

  • SHA512

    4d5a75591d1f9d9d4cfd6f25250b9c0aab9cb09ea05a86ad29056fd794e06544974c61033ecd594c4dec746d291c6a995a489ba64dcd1d4ae791da6fe23e0210

  • SSDEEP

    1536:L5qy5eV2+suXluCpZwmO/i2Q0mMx8ot+doa/7/vRoTIqaroBz0RoQ1eN:tq+KzXQCpZlO/vRyc+T+mw4RoQ1o

Malware Config

Extracted

Family

emotet

Botnet

Epoch2

C2

38.18.235.242:80

5.196.108.189:8080

121.124.124.40:7080

104.236.246.93:8080

113.61.66.94:80

120.150.60.189:80

91.211.88.52:7080

47.144.21.12:443

108.46.29.236:80

139.162.108.71:8080

134.209.36.254:8080

139.59.60.244:8080

66.65.136.14:80

76.175.162.101:80

174.106.122.139:80

95.213.236.64:8080

174.45.13.118:80

50.35.17.13:80

209.141.54.221:8080

87.106.139.101:8080

rsa_pubkey.plain
1
-----BEGIN PUBLIC KEY-----
2
MHwwDQYJKoZIhvcNAQEBBQADawAwaAJhANQOcBKvh5xEW7VcJ9totsjdBwuAclxS
3
Q0e09fk8V053lktpW3TRrzAW63yt6j1KWnyxMrU3igFXypBoI4lVNmkje4UPtIIS
4
fkzjEIvG1v/ZNn1k0J0PfFTxbFFeUEs3AwIDAQAB
5
-----END PUBLIC KEY-----

Targets

    • Target

      e172f09767597e2b47bd89e83836141e_JaffaCakes118

    • Size

      95KB

    • MD5

      e172f09767597e2b47bd89e83836141e

    • SHA1

      fdfb280b57c4893cc615574361be8fb04f23602b

    • SHA256

      ae30e74e62d6c4b63d8e8e0f39be9de17a61591d53931662ec6f95bd7be20ca3

    • SHA512

      4d5a75591d1f9d9d4cfd6f25250b9c0aab9cb09ea05a86ad29056fd794e06544974c61033ecd594c4dec746d291c6a995a489ba64dcd1d4ae791da6fe23e0210

    • SSDEEP

      1536:L5qy5eV2+suXluCpZwmO/i2Q0mMx8ot+doa/7/vRoTIqaroBz0RoQ1eN:tq+KzXQCpZlO/vRyc+T+mw4RoQ1o

    • Emotet

      Emotet is a trojan that is primarily spread through spam emails.

    • Emotet payload

      Detects Emotet payload in memory.

MITRE ATT&CK Enterprise v15

Tasks

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.