emotet | 807fe6566c08fcadc1067fe97acd33f86042f68795b4390280ef582bc8c6eda1 | Triage

Submit
Reports

Overview

overview

Static

static

3

fff539917c...18.exe

windows7-x64

fff539917c...18.exe

windows10-2004-x64

Sharing

General

Target

fff539917c2482a684bfe89956f4c9fd_JaffaCakes118
Size

361KB
Sample

240930-e1fxzaxhmm
MD5

fff539917c2482a684bfe89956f4c9fd
SHA1

f98b36a1f5695ce9c2c9e99a58831efb632e560f
SHA256

807fe6566c08fcadc1067fe97acd33f86042f68795b4390280ef582bc8c6eda1
SHA512

74c3c8043836f962fef9837d67221e178a365c383c58a61b4c9eeaa4ea2b77d829b4854f911c2962c720bc670afaa6e55910222b0d601b6e45ffa785ff71ee49
SSDEEP

3072:v7q/qlxTxZNEgkJ7uScED5PDkcVI9GaiaWbRb+d547AGzBRhBcCFw:i7owwGaihbRboKBi

Score

10^/10

emotet banker discovery trojan

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

fff539917c2482a684bfe89956f4c9fd_JaffaCakes118.exe

Resource

win7-20240704-en

emotet banker discovery trojan

windows7-x64

9 signatures

150 seconds

Behavioral task

behavioral2

Sample

fff539917c2482a684bfe89956f4c9fd_JaffaCakes118.exe

Resource

win10v2004-20240802-en

emotet banker discovery trojan

windows10-2004-x64

7 signatures

150 seconds

Malware Config

Targets

- Target
  
  fff539917c2482a684bfe89956f4c9fd_JaffaCakes118
- Size
  
  361KB
- MD5
  
  fff539917c2482a684bfe89956f4c9fd
- SHA1
  
  f98b36a1f5695ce9c2c9e99a58831efb632e560f
- SHA256
  
  807fe6566c08fcadc1067fe97acd33f86042f68795b4390280ef582bc8c6eda1
- SHA512
  
  74c3c8043836f962fef9837d67221e178a365c383c58a61b4c9eeaa4ea2b77d829b4854f911c2962c720bc670afaa6e55910222b0d601b6e45ffa785ff71ee49
- SSDEEP
  
  3072:v7q/qlxTxZNEgkJ7uScED5PDkcVI9GaiaWbRb+d547AGzBRhBcCFw:i7owwGaihbRboKBi
Score

10^/10

emotet banker discovery trojan
- Emotet
  Emotet is a trojan that is primarily spread through spam emails.
  trojan banker emotet
- Unexpected DNS network traffic destination
  Network traffic to other servers than the configured DNS servers was detected on the DNS port.
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

emotetbankerdiscoverytrojan

behavioral2

emotetbankerdiscoverytrojan

© 2018-2025

Terms | Privacy