Overview

overview

10

Static

static

10

e4373146af...18.exe

windows7-x64

10

e4373146af...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    e4373146afecedbc27aac84accdf5b20_JaffaCakes118

  • Size

    57KB

  • MD5

    e4373146afecedbc27aac84accdf5b20

  • SHA1

    58366d1a8be16d30e4c1bb97c04bd587b33521dd

  • SHA256

    19e998ae7e9f9d29ce712958e3b695c587bdde77242cde384bf61a2ec6cf3a26

  • SHA512

    722418c39f21d1ffc958279fa684ea1367dfa9275762b77331d1aa8982d1b08fc8ffb5bbc40e7cdd606981dc70e73285952532d7e913567f5977ed616b7a2376

  • SSDEEP

    1536:WlMBmWKs7rvtEkPb1ikM8j2eQUZD7fiumtCZtPX9UQnY6SFEatA:wAKsHtEkDTjXX3iec0WEatA

Score
10/10
epoch2emotet

Malware Config

Extracted

Family

emotet

Botnet

Epoch2

C2

186.4.172.5:443

186.4.172.5:8080

85.25.255.207:8080

185.94.252.13:443

94.177.216.217:8080

124.240.198.66:80

189.209.217.49:80

200.113.106.18:465

200.113.106.18:21

185.187.198.15:80

159.65.25.128:8080

87.106.136.232:8080

83.136.245.190:8080

212.71.234.16:8080

103.39.131.88:80

169.239.182.217:8080

136.243.177.26:8080

167.71.10.37:8080

201.250.54.115:50000

190.226.44.20:21
rsa_pubkey.plain

Signatures

  • Emotet family
    emotet
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • e4373146afecedbc27aac84accdf5b20_JaffaCakes118
    .exe windows:6 windows x86 arch:x86

    009889c73bd2e55113bf6dfa5f395e0d


    Headers

    Imports

    Sections