Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

JaffaCakes...85.exe

windows7-x64

10

JaffaCakes...85.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_e35cb2ce6066ab577d656db8fa566b0efde1f8a09749bc2f34c62c4d156d3085

  • Size

    923KB

  • Sample

    241225-xal1easqam

  • MD5

    9f26f0e598816cafca3c5da92499f958

  • SHA1

    825d10a35ea396389069e07751e7fac921018dbe

  • SHA256

    e35cb2ce6066ab577d656db8fa566b0efde1f8a09749bc2f34c62c4d156d3085

  • SHA512

    bcd3a9e1353d8553c7e249cc7158ab4f0d380b82db30628e189232b847b9fd6a56804ac280e00c0ab8bb9cd5afb029bc2b014bb8a5aef766a32f0fe65bdce8b0

  • SSDEEP

    12288:CMlCHIWMOZkzNxP+KngRYq3Ocs5PFCJbjhK+pfff0Lvmq:tCpZkiKngRYbcUYXhK+pffsL3

Score
10/10
emotetepoch3bankerdiscoverytrojan

Malware Config

Extracted

Family

emotet

Botnet

Epoch3

C2

187.64.128.197:80

198.57.203.63:8080

163.172.107.70:8080

212.112.113.235:80

157.7.164.178:8081

181.167.35.84:80

212.156.133.218:80

185.142.236.163:443

181.143.101.19:8080

75.127.14.170:8080

115.165.3.213:80

190.55.233.156:80

139.59.12.63:8080

144.139.91.187:80

37.70.131.107:80

181.113.229.139:443

41.185.29.128:8080

177.37.81.212:443

5.79.70.250:8080

78.188.170.128:80
rsa_pubkey.plain

Targets

    • Target

      JaffaCakes118_e35cb2ce6066ab577d656db8fa566b0efde1f8a09749bc2f34c62c4d156d3085

    • Size

      923KB

    • MD5

      9f26f0e598816cafca3c5da92499f958

    • SHA1

      825d10a35ea396389069e07751e7fac921018dbe

    • SHA256

      e35cb2ce6066ab577d656db8fa566b0efde1f8a09749bc2f34c62c4d156d3085

    • SHA512

      bcd3a9e1353d8553c7e249cc7158ab4f0d380b82db30628e189232b847b9fd6a56804ac280e00c0ab8bb9cd5afb029bc2b014bb8a5aef766a32f0fe65bdce8b0

    • SSDEEP

      12288:CMlCHIWMOZkzNxP+KngRYq3Ocs5PFCJbjhK+pfff0Lvmq:tCpZkiKngRYbcUYXhK+pffsL3

    Score
    10/10
    emotetepoch3bankerdiscoverytrojan
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks