General

  • Target

    JaffaCakes118_aa591535a6c6e582c843b9205dba5b27cdf5b423be8dccdd488629650f301777

  • Size

    547KB

  • Sample

    241224-t5adba1rax

  • MD5

    7b8c0afa6c4e06b27be381795b18cc5e

  • SHA1

    745d219f301c0a0fe2d277fc3bc97e3df10d2aa9

  • SHA256

    aa591535a6c6e582c843b9205dba5b27cdf5b423be8dccdd488629650f301777

  • SHA512

    09e3a4559a0caa998ba45917957670178ad99a57903e3156ff5d45953664417be484712c4b1e1cd591e0972a546610ac6516b2642215074877f0b422cd1c590a

  • SSDEEP

    12288:CXsObgCuH3bm4vOJz2t0t/tVtJtkK51o2:CzMCuH7OJzx19

Malware Config

Extracted

Family

emotet

Botnet

Epoch2

C2

88.153.35.32:80

107.170.146.252:8080

173.212.214.235:7080

167.114.153.111:8080

67.170.250.203:443

121.124.124.40:7080

103.86.49.11:8080

74.214.230.200:80

194.187.133.160:443

172.104.97.173:8080

172.91.208.86:80

200.116.145.225:443

202.134.4.216:8080

172.105.13.66:443

190.164.104.62:80

50.35.17.13:80

176.111.60.55:8080

201.241.127.190:80

66.76.12.94:8080

95.213.236.64:8080

rsa_pubkey.plain

Targets

    • Target

      JaffaCakes118_aa591535a6c6e582c843b9205dba5b27cdf5b423be8dccdd488629650f301777

    • Size

      547KB

    • MD5

      7b8c0afa6c4e06b27be381795b18cc5e

    • SHA1

      745d219f301c0a0fe2d277fc3bc97e3df10d2aa9

    • SHA256

      aa591535a6c6e582c843b9205dba5b27cdf5b423be8dccdd488629650f301777

    • SHA512

      09e3a4559a0caa998ba45917957670178ad99a57903e3156ff5d45953664417be484712c4b1e1cd591e0972a546610ac6516b2642215074877f0b422cd1c590a

    • SSDEEP

      12288:CXsObgCuH3bm4vOJz2t0t/tVtJtkK51o2:CzMCuH7OJzx19

MITRE ATT&CK Enterprise v15

Tasks