General
-
Target
fd13092ca2f1aacda7d6b52f63549db3_JaffaCakes118
-
Size
217KB
-
Sample
240928-y4s69axfke
-
MD5
fd13092ca2f1aacda7d6b52f63549db3
-
SHA1
a5c1a11c0de39955284a4e80ad65cb1a343afbf2
-
SHA256
ae8116d3612f4643556d0645bfb47284909ba625ad5b4e3e4d43816fbaeba6bb
-
SHA512
590d25aa88bdcdc9840c69b31c2a881df5114ab880cb909184a014b782727a446ef47ba978d165be09bc22e066ca836871ff7197ea806849854e7fcccd0fd9c7
-
SSDEEP
3072:ghwzKIBjNtuBNjTFgEnf2qcmWsnvspn8XldWpz60icVgN8JSJ68UPslH:qFIpNtuBRj2qMW0olYpz6zugNS8Es
Static task
static1
Behavioral task
behavioral1
Sample
fd13092ca2f1aacda7d6b52f63549db3_JaffaCakes118.exe
Resource
win7-20240903-en
Malware Config
Extracted
emotet
Epoch2
50.116.86.205:8080
209.97.168.52:8080
37.187.2.199:443
149.202.197.94:8080
104.239.175.211:8080
104.131.11.150:8080
144.139.247.220:80
59.103.164.174:80
182.176.132.213:8090
87.230.19.21:8080
149.202.153.252:8080
103.39.131.88:80
107.170.24.125:8080
192.241.255.77:8080
190.145.67.134:8090
186.75.241.230:80
192.241.220.155:8080
178.210.51.222:8080
37.157.194.134:443
31.12.67.62:7080
104.131.44.150:8080
167.99.105.223:7080
5.196.74.210:8080
91.205.215.66:8080
190.53.135.159:21
189.209.217.49:80
78.24.219.147:8080
165.227.156.155:443
83.136.245.190:8080
80.11.163.139:21
171.101.153.86:990
190.147.215.53:22
181.31.213.158:8080
31.172.240.91:8080
85.104.59.244:20
176.31.200.130:8080
183.102.238.69:465
138.201.140.110:8080
95.128.43.213:8080
178.209.71.63:8080
87.106.139.101:8080
190.211.207.11:443
169.239.182.217:8080
211.63.71.72:8080
192.81.213.192:8080
67.225.179.64:8080
173.212.203.26:8080
191.92.209.110:7080
115.78.95.230:443
87.106.136.232:8080
181.143.194.138:443
92.222.216.44:8080
94.192.228.255:80
190.226.44.20:21
90.77.228.193:8090
167.71.10.37:8080
159.65.25.128:8080
65.23.154.17:8080
212.129.24.79:8080
62.75.187.192:8080
104.236.246.93:8080
45.33.49.124:443
217.160.182.191:8080
46.105.131.87:80
200.71.148.138:8080
181.57.193.14:80
Targets
-
-
Target
fd13092ca2f1aacda7d6b52f63549db3_JaffaCakes118
-
Size
217KB
-
MD5
fd13092ca2f1aacda7d6b52f63549db3
-
SHA1
a5c1a11c0de39955284a4e80ad65cb1a343afbf2
-
SHA256
ae8116d3612f4643556d0645bfb47284909ba625ad5b4e3e4d43816fbaeba6bb
-
SHA512
590d25aa88bdcdc9840c69b31c2a881df5114ab880cb909184a014b782727a446ef47ba978d165be09bc22e066ca836871ff7197ea806849854e7fcccd0fd9c7
-
SSDEEP
3072:ghwzKIBjNtuBNjTFgEnf2qcmWsnvspn8XldWpz60icVgN8JSJ68UPslH:qFIpNtuBRj2qMW0olYpz6zugNS8Es
-
Drops file in System32 directory
-