Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
JaffaCakes118_6bfbca79e37017f4ebbdcbf3baafc941d7f4476eea5a8411d0be3ffbe6e56f5a
-
Size
373KB
-
Sample
241223-11386atjel
-
MD5
6cbc68e9d78aae1d1d6621e2662c942c
-
SHA1
df671df44b9ff56429041750601d9ef29a5cfd85
-
SHA256
6bfbca79e37017f4ebbdcbf3baafc941d7f4476eea5a8411d0be3ffbe6e56f5a
-
SHA512
ce887863e5bb867577b57c71ba28401f425367534341c088cf5a0b0b18aeeca4d2d07c4648e5a17f880783099eb7a50f239d4362dddede4b72857af69a23ce53
-
SSDEEP
6144:8fC9GB4O2eVC3jCGtct0CyCt6bEPEqzjRbgCOLN:8T2MCOGySCyREP4
Malware Config
Extracted
emotet
Epoch3
221.147.142.214:80
188.40.170.197:80
51.38.50.144:8080
46.22.116.163:7080
190.151.5.131:443
58.27.215.3:8080
179.5.118.12:80
73.100.19.104:80
192.210.217.94:8080
192.163.221.191:8080
103.93.220.182:80
91.213.106.100:8080
190.192.39.136:80
115.79.59.157:80
190.164.135.81:80
91.83.93.103:443
188.166.220.180:7080
116.202.10.123:8080
36.91.44.183:80
77.74.78.80:443
Targets
-
-
Target
JaffaCakes118_6bfbca79e37017f4ebbdcbf3baafc941d7f4476eea5a8411d0be3ffbe6e56f5a
-
Size
373KB
-
MD5
6cbc68e9d78aae1d1d6621e2662c942c
-
SHA1
df671df44b9ff56429041750601d9ef29a5cfd85
-
SHA256
6bfbca79e37017f4ebbdcbf3baafc941d7f4476eea5a8411d0be3ffbe6e56f5a
-
SHA512
ce887863e5bb867577b57c71ba28401f425367534341c088cf5a0b0b18aeeca4d2d07c4648e5a17f880783099eb7a50f239d4362dddede4b72857af69a23ce53
-
SSDEEP
6144:8fC9GB4O2eVC3jCGtct0CyCt6bEPEqzjRbgCOLN:8T2MCOGySCyREP4
Score10/10-
Emotet
Emotet is a trojan that is primarily spread through spam emails.
-
Emotet family
-
Emotet payload
Detects Emotet payload in memory.
-