Overview

overview

10

Static

static

3

eefde54369...18.exe

windows7-x64

10

eefde54369...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    eefde5436983befb9a7c805d2f7436c9_JaffaCakes118

  • Size

    574KB

  • Sample

    240921-d4drcatake

  • MD5

    eefde5436983befb9a7c805d2f7436c9

  • SHA1

    89d5bb7ed8b116a4e499fca0f0e6ec3a34db1232

  • SHA256

    260c576a58e5974162b2736066a5754f068fd8d119ba96922ebf00e7d5256f03

  • SHA512

    0257c672a82a20a47cd68194f4eecb1f9f4187e49d00316b59cb12e3b42e1cad9094ff1d6307872ca1e968fd24787fa00adb0dfd942a2dd7ae05b302aadceb50

  • SSDEEP

    6144:0x8FPmWqwcz68XkgP+iDWmgoetViXc5n4MEP5:Xqw4jGid9eKXc5nxEP5

Score
10/10
emotetepoch1bankerdiscoverytrojan

Malware Config

Extracted

Family

emotet

Botnet

Epoch1

C2

144.139.91.187:443

157.7.199.53:8080

189.218.165.63:80

104.236.161.64:8080

2.47.112.152:80

185.94.252.27:443

202.62.39.111:80

190.17.195.202:80

143.0.87.101:80

70.32.84.74:8080

45.161.242.102:80

190.194.242.254:443

50.28.51.143:8080

204.225.249.100:7080

137.74.106.111:7080

68.183.170.114:8080

181.31.211.181:80

149.62.173.247:8080

177.75.143.112:443

190.229.148.144:80
rsa_pubkey.plain

Targets

    • Target

      eefde5436983befb9a7c805d2f7436c9_JaffaCakes118

    • Size

      574KB

    • MD5

      eefde5436983befb9a7c805d2f7436c9

    • SHA1

      89d5bb7ed8b116a4e499fca0f0e6ec3a34db1232

    • SHA256

      260c576a58e5974162b2736066a5754f068fd8d119ba96922ebf00e7d5256f03

    • SHA512

      0257c672a82a20a47cd68194f4eecb1f9f4187e49d00316b59cb12e3b42e1cad9094ff1d6307872ca1e968fd24787fa00adb0dfd942a2dd7ae05b302aadceb50

    • SSDEEP

      6144:0x8FPmWqwcz68XkgP+iDWmgoetViXc5n4MEP5:Xqw4jGid9eKXc5nxEP5

    Score
    10/10
    emotetepoch1bankerdiscoverytrojan

    • Emotet

      Emotet is a trojan that is primarily spread through spam emails.

      trojanbankeremotet

    • Emotet payload

      Detects Emotet payload in memory.

      trojanbanker
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks