Overview

overview

10

Static

static

3

e210591331...18.exe

windows7-x64

10

e210591331...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    e210591331015f331070a2eb226c3276_JaffaCakes118

  • Size

    231KB

  • Sample

    240915-j9pcxstgle

  • MD5

    e210591331015f331070a2eb226c3276

  • SHA1

    af03b1a0714e2c69caff168ae899845d523dc26e

  • SHA256

    a2cd31d2e2ec2804a9a08e4254e54e8dd57a6d53498ac042c4742d4b0aaff3aa

  • SHA512

    62485ddb72e94370f537e7114ca7edf59cf98cbf98b7b15f9d2c89e481124fcbf29db5bd5737176653d33f61e20b9ead91ff9bbfa73bcdfe2608f8568385ecbb

  • SSDEEP

    3072:Qqg1hMvlqcr0qrIFQfCmVw+AguaZAMHlDq1wUr5QXlt1FyUy/HFuSefttvTcYlve:qE0q9qmKdaZtyHNQtFJy/Fu/TlBe

Score
10/10
emotetepoch1bankerdiscoverytrojan

Malware Config

Extracted

Family

emotet

Botnet

Epoch1

C2

107.170.27.84:443

85.234.143.94:8080

204.225.249.100:8080

173.212.220.251:443

60.54.37.25:80

178.249.187.151:8080

91.83.93.124:7080

77.245.101.134:8080

68.183.190.199:8080

203.25.159.3:8080

41.75.135.93:7080

46.28.111.142:7080

163.172.40.218:7080

45.79.95.107:443

181.198.203.45:443

185.86.148.222:8080

181.231.62.54:80

186.23.132.93:990

46.29.183.211:8080

62.75.143.100:7080
rsa_pubkey.plain

Targets

    • Target

      e210591331015f331070a2eb226c3276_JaffaCakes118

    • Size

      231KB

    • MD5

      e210591331015f331070a2eb226c3276

    • SHA1

      af03b1a0714e2c69caff168ae899845d523dc26e

    • SHA256

      a2cd31d2e2ec2804a9a08e4254e54e8dd57a6d53498ac042c4742d4b0aaff3aa

    • SHA512

      62485ddb72e94370f537e7114ca7edf59cf98cbf98b7b15f9d2c89e481124fcbf29db5bd5737176653d33f61e20b9ead91ff9bbfa73bcdfe2608f8568385ecbb

    • SSDEEP

      3072:Qqg1hMvlqcr0qrIFQfCmVw+AguaZAMHlDq1wUr5QXlt1FyUy/HFuSefttvTcYlve:qE0q9qmKdaZtyHNQtFJy/Fu/TlBe

    Score
    10/10
    emotetepoch1bankerdiscoverytrojan

    • Emotet

      Emotet is a trojan that is primarily spread through spam emails.

      trojanbankeremotet

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks