Overview

overview

10

Static

static

3

eb637d0ac7...18.dll

windows7-x64

10

eb637d0ac7...18.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    eb637d0ac74e2721706335490a1ae52b_JaffaCakes118

  • Size

    609KB

  • Sample

    240919-p934zazbqa

  • MD5

    eb637d0ac74e2721706335490a1ae52b

  • SHA1

    04820a8cfbbc9bdfaf7940cdd65e68ecbf9b51c4

  • SHA256

    b2151c233e8f92c6545bcec6f4545ff5f6fc14560fa5ba84020d9600062db8ad

  • SHA512

    d5ddd01fb73efa3040529ed5b6e456784653d44809f12661ae459520620c1e8fa2e0ff8b76816facda276f5ca1460f3ed8e8a17ec4660e7e83cf7d0069f90d0a

  • SSDEEP

    12288:4YzchQVZnkmt/70MWugxPJZFpf0c1pH8bdJxUR9rNXZL4:L4KV5Hpt8bZHLknM919

Score
10/10
emotetepoch3bankerdiscoverytrojan

Malware Config

Extracted

Family

emotet

Botnet

Epoch3

C2

190.55.186.229:80

203.157.152.9:7080

157.245.145.87:443

132.248.38.158:80

110.172.180.180:8080

70.32.89.105:8080

161.49.84.2:80

37.46.129.215:8080

50.116.78.109:8080

115.79.195.246:80

178.62.254.156:8080

175.103.38.146:80

188.226.165.170:8080

91.93.3.85:8080

162.144.145.58:8080

117.2.139.117:443

190.85.46.52:7080

201.193.160.196:80

152.32.75.74:443

195.201.56.70:8080
rsa_pubkey.plain

Targets

    • Target

      eb637d0ac74e2721706335490a1ae52b_JaffaCakes118

    • Size

      609KB

    • MD5

      eb637d0ac74e2721706335490a1ae52b

    • SHA1

      04820a8cfbbc9bdfaf7940cdd65e68ecbf9b51c4

    • SHA256

      b2151c233e8f92c6545bcec6f4545ff5f6fc14560fa5ba84020d9600062db8ad

    • SHA512

      d5ddd01fb73efa3040529ed5b6e456784653d44809f12661ae459520620c1e8fa2e0ff8b76816facda276f5ca1460f3ed8e8a17ec4660e7e83cf7d0069f90d0a

    • SSDEEP

      12288:4YzchQVZnkmt/70MWugxPJZFpf0c1pH8bdJxUR9rNXZL4:L4KV5Hpt8bZHLknM919

    Score
    10/10
    emotetepoch3bankerdiscoverytrojan

    • Emotet

      Emotet is a trojan that is primarily spread through spam emails.

      trojanbankeremotet

    • Blocklisted process makes network request

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks