General

  • Target

    f8dc3573d2881ae76cd1e5d36b343cad_JaffaCakes118

  • Size

    272KB

  • Sample

    240926-vxvvqasbmf

  • MD5

    f8dc3573d2881ae76cd1e5d36b343cad

  • SHA1

    573cafb3847f0efb576a3f4082080b37cab5c93e

  • SHA256

    f9075888e5337415f4f8e3fc35878954d9afc1ede90f7f78708355dd0ccc5c82

  • SHA512

    086355df4f6f1ae5f08d077f59c1cde525c313502b6946bf775088cb34674ee60dd806dd8d73274709218f6bd41765074367d1ddd5e2c5d3690ccba8828de6a2

  • SSDEEP

    6144:wDC5yQfvp9e4YbTaPnEu/+6i5j0RglJWIaLiLC:4CBfvLoaPDHi1Jge+

Malware Config

Extracted

Family

emotet

Botnet

Epoch1

C2

50.121.220.50:80

51.75.33.122:80

54.37.42.48:8080

91.121.54.71:8080

68.69.155.181:80

12.162.84.2:8080

77.55.211.77:8080

104.131.41.185:8080

85.105.140.135:443

51.255.165.160:8080

213.60.96.117:80

45.16.226.117:443

111.67.12.221:8080

190.6.193.152:8080

45.161.242.102:80

190.163.31.26:80

172.104.169.32:8080

185.94.252.12:80

212.174.55.22:443

50.28.51.143:8080

rsa_pubkey.plain

Targets

    • Target

      f8dc3573d2881ae76cd1e5d36b343cad_JaffaCakes118

    • Size

      272KB

    • MD5

      f8dc3573d2881ae76cd1e5d36b343cad

    • SHA1

      573cafb3847f0efb576a3f4082080b37cab5c93e

    • SHA256

      f9075888e5337415f4f8e3fc35878954d9afc1ede90f7f78708355dd0ccc5c82

    • SHA512

      086355df4f6f1ae5f08d077f59c1cde525c313502b6946bf775088cb34674ee60dd806dd8d73274709218f6bd41765074367d1ddd5e2c5d3690ccba8828de6a2

    • SSDEEP

      6144:wDC5yQfvp9e4YbTaPnEu/+6i5j0RglJWIaLiLC:4CBfvLoaPDHi1Jge+

    • Emotet

      Emotet is a trojan that is primarily spread through spam emails.

MITRE ATT&CK Enterprise v15

Tasks