Overview

overview

10

Static

static

3

f8320415d5...18.exe

windows7-x64

10

f8320415d5...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    f8320415d50fd886ac2dbccf7971e45a_JaffaCakes118

  • Size

    667KB

  • Sample

    240926-msjmwswdkh

  • MD5

    f8320415d50fd886ac2dbccf7971e45a

  • SHA1

    6a8c5a9ddab7be81494af455862d3163142460d8

  • SHA256

    b7febc43c9b6f8b5cd48f1b332c02b9ff152fac27a4a73e191e3d005e28b06ea

  • SHA512

    7c2382dc967aad806b88563e66ed6b804e7e54b7416810c4dea85b1ed17081fc0916296dd57665cd07d164d6dd1e55d2bc0b0178e48173fd1b087260b44c9439

  • SSDEEP

    12288:U2JhG//t8C5VCFSoDpaQlHfl6mCiWDaBMFCMoCGsq:U2JC/t8iVNoDgQVN6mCiptxX

Score
10/10
emotetepoch3bankerdiscoverytrojan

Malware Config

Extracted

Family

emotet

Botnet

Epoch3

C2

116.91.240.96:80

167.71.227.113:8080

190.85.46.52:7080

162.144.42.60:8080

202.166.170.43:80

95.216.205.155:8080

120.51.34.254:80

103.93.220.182:80

111.89.241.139:80

60.125.114.64:443

45.177.120.37:8080

185.86.148.68:443

75.127.14.170:8080

119.92.77.17:80

203.153.216.178:7080

172.96.190.154:8080

179.5.118.12:80

153.229.219.1:443

139.59.12.63:8080

115.79.195.246:80
rsa_pubkey.plain

Targets

    • Target

      f8320415d50fd886ac2dbccf7971e45a_JaffaCakes118

    • Size

      667KB

    • MD5

      f8320415d50fd886ac2dbccf7971e45a

    • SHA1

      6a8c5a9ddab7be81494af455862d3163142460d8

    • SHA256

      b7febc43c9b6f8b5cd48f1b332c02b9ff152fac27a4a73e191e3d005e28b06ea

    • SHA512

      7c2382dc967aad806b88563e66ed6b804e7e54b7416810c4dea85b1ed17081fc0916296dd57665cd07d164d6dd1e55d2bc0b0178e48173fd1b087260b44c9439

    • SSDEEP

      12288:U2JhG//t8C5VCFSoDpaQlHfl6mCiWDaBMFCMoCGsq:U2JC/t8iVNoDgQVN6mCiptxX

    Score
    10/10
    emotetepoch3bankerdiscoverytrojan

    • Emotet

      Emotet is a trojan that is primarily spread through spam emails.

      trojanbankeremotet

    • Emotet payload

      Detects Emotet payload in memory.

      trojanbanker
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks