General

  • Target

    f3809d1b55b01fc6e64cf6ab7799881c_JaffaCakes118

  • Size

    848KB

  • Sample

    240924-m62qmawbjb

  • MD5

    f3809d1b55b01fc6e64cf6ab7799881c

  • SHA1

    89dcd1a25c9825c018f39493ef38dba5e02fab9f

  • SHA256

    337218780caef21b4086c7defd360afeb280e8252d8996e389579e128b49e493

  • SHA512

    dddee71c39ee2d12f1b9daaad971734e46d3bd923a4afa099c342d6d8876b74e5f08ec54e0f9c79a721fe27bcc60ca5c45cd5ad88ffccedee7bda1cd1652a84f

  • SSDEEP

    6144:eTaQZdJnaB1kNOOFSm9Vc6c6c6c6c6c6c6c6c6cyI6HmMETLv3NIDK:eGQfJZFrnHFETL

Malware Config

Extracted

Family

emotet

Botnet

Epoch3

C2

190.136.179.102:80

97.107.135.148:8080

94.102.209.63:7080

162.144.42.60:8080

81.214.253.80:443

87.106.231.60:8080

107.161.30.122:8080

66.61.94.36:80

139.59.12.63:8080

203.153.216.178:7080

178.33.167.120:8080

179.62.238.49:80

50.116.78.109:8080

74.208.173.91:8080

113.161.148.81:80

179.5.118.12:80

202.5.47.71:80

91.83.93.103:443

181.113.229.139:443

41.185.29.128:8080

rsa_pubkey.plain

Targets

    • Target

      f3809d1b55b01fc6e64cf6ab7799881c_JaffaCakes118

    • Size

      848KB

    • MD5

      f3809d1b55b01fc6e64cf6ab7799881c

    • SHA1

      89dcd1a25c9825c018f39493ef38dba5e02fab9f

    • SHA256

      337218780caef21b4086c7defd360afeb280e8252d8996e389579e128b49e493

    • SHA512

      dddee71c39ee2d12f1b9daaad971734e46d3bd923a4afa099c342d6d8876b74e5f08ec54e0f9c79a721fe27bcc60ca5c45cd5ad88ffccedee7bda1cd1652a84f

    • SSDEEP

      6144:eTaQZdJnaB1kNOOFSm9Vc6c6c6c6c6c6c6c6c6cyI6HmMETLv3NIDK:eGQfJZFrnHFETL

    • Emotet

      Emotet is a trojan that is primarily spread through spam emails.

MITRE ATT&CK Enterprise v15

Tasks