Overview

overview

10

Static

static

10

f70293d937...18.exe

windows7-x64

10

f70293d937...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    f70293d937d4cab1a4d5e7149be6e670_JaffaCakes118

  • Size

    58KB

  • MD5

    f70293d937d4cab1a4d5e7149be6e670

  • SHA1

    79d2b78cb813dd6adf3fc24c05daeab403d15f3d

  • SHA256

    f570f153b8e834fe30a3ba90aeb618a0e9e5926d0df533781f121dc784f9d3bc

  • SHA512

    3f935b783ff3c146c2d5742d9567353144a9bc447d06d33fb612c9eb8fdfa6a7137996ee77c390476af42b84159e7f8e8ecb354a65d2e2858760aba42a642c09

  • SSDEEP

    1536:wKlUb+Dm4s9hN1YkPDckM8HsquOBcrqqRTVrdnsqiMSUke:ZI4sZ1YkPH1BcGqFVrBvr

Score
10/10
epoch2emotet

Malware Config

Extracted

Family

emotet

Botnet

Epoch2

C2

91.121.116.137:443

80.79.23.144:443

192.254.173.31:8080

27.4.80.183:443

31.12.67.62:7080

95.128.43.213:8080

94.192.225.46:80

190.108.228.48:990

186.4.172.5:8080

87.230.19.21:8080

136.243.177.26:8080

185.94.252.13:443

206.189.98.125:8080

190.18.146.70:80

186.75.241.230:80

94.205.247.10:80

211.63.71.72:8080

190.186.203.55:80

115.78.95.230:443

212.71.234.16:8080
rsa_pubkey.plain

Signatures

  • Emotet family
    emotet
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • f70293d937d4cab1a4d5e7149be6e670_JaffaCakes118
    .exe windows:6 windows x86 arch:x86

    009889c73bd2e55113bf6dfa5f395e0d


    Headers

    Imports

    Sections