General
-
Target
ff07f6f1a099e1cc62faa43753f2fd29_JaffaCakes118
-
Size
667KB
-
Sample
240929-v54slaxbmg
-
MD5
ff07f6f1a099e1cc62faa43753f2fd29
-
SHA1
e9ebc00f9847d0f44af83aebffc0050c1978f4f6
-
SHA256
ec2d6246ae93d2a4fa76fa84cdbceedf7f8b5f1fd1f8810641f89a4bc1e587cd
-
SHA512
970071c49d9a6e4a625a7ae2216ece125794eaf17b5958683e48cf04a42b813135f23142a402de0d6ee0a99a42cde67dccdf966ad549d6fe96e9708b1feb69f4
-
SSDEEP
12288:U2JhG//t8C5VCFSoDpaQlHfl6mCiWDaBMFCCoCGsq:U2JC/t8iVNoDgQVN6mCiptrX
Malware Config
Extracted
emotet
Epoch3
116.91.240.96:80
167.71.227.113:8080
190.85.46.52:7080
162.144.42.60:8080
202.166.170.43:80
95.216.205.155:8080
120.51.34.254:80
103.93.220.182:80
111.89.241.139:80
60.125.114.64:443
45.177.120.37:8080
185.86.148.68:443
75.127.14.170:8080
119.92.77.17:80
203.153.216.178:7080
172.96.190.154:8080
179.5.118.12:80
153.229.219.1:443
139.59.12.63:8080
115.79.195.246:80
Targets
-
-
Target
ff07f6f1a099e1cc62faa43753f2fd29_JaffaCakes118
-
Size
667KB
-
MD5
ff07f6f1a099e1cc62faa43753f2fd29
-
SHA1
e9ebc00f9847d0f44af83aebffc0050c1978f4f6
-
SHA256
ec2d6246ae93d2a4fa76fa84cdbceedf7f8b5f1fd1f8810641f89a4bc1e587cd
-
SHA512
970071c49d9a6e4a625a7ae2216ece125794eaf17b5958683e48cf04a42b813135f23142a402de0d6ee0a99a42cde67dccdf966ad549d6fe96e9708b1feb69f4
-
SSDEEP
12288:U2JhG//t8C5VCFSoDpaQlHfl6mCiWDaBMFCCoCGsq:U2JC/t8iVNoDgQVN6mCiptrX
Score10/10-
Emotet
Emotet is a trojan that is primarily spread through spam emails.
-
Emotet payload
Detects Emotet payload in memory.
-