Overview

overview

10

Static

static

3

JaffaCakes...13.exe

windows7-x64

10

JaffaCakes...13.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_16fa1b67236128797315debabf170942304c15cb722dda5216aacc3161212513

  • Size

    448KB

  • Sample

    241225-ykppqavqfj

  • MD5

    ef8f43251125404bae091cc0c3248355

  • SHA1

    fd2cd90982f25ff3d9e2f4a14aaddafc3d5ce033

  • SHA256

    16fa1b67236128797315debabf170942304c15cb722dda5216aacc3161212513

  • SHA512

    c173c248ac0de6d3aceb91509525b437eca6801f9e6f1bffb1cd09ff6f54e663bc9b8ca282dec3dc2f529044490b1cf7ce7a535281e8d3b964af78248e1c066b

  • SSDEEP

    12288:8fzaBuiszJbE9mO4sl9kVlAOyQkNvOzxo0:8bMmO4sl9sR2Ot/

Score
10/10
emotetepoch1bankerdiscoverytrojan

Malware Config

Extracted

Family

emotet

Botnet

Epoch1

C2

174.100.27.229:80

209.126.6.222:8080

5.153.250.14:8080

192.241.146.84:8080

95.9.180.128:80

77.55.211.77:8080

85.105.140.135:443

45.33.77.42:8080

77.90.136.129:8080

94.176.234.118:443

190.163.31.26:80

190.6.193.152:8080

190.181.235.46:80

81.198.69.61:80

188.2.217.94:80

114.109.179.60:80

83.169.21.32:7080

137.74.106.111:7080

212.231.60.98:80

170.81.48.2:80
rsa_pubkey.plain

Targets

    • Target

      JaffaCakes118_16fa1b67236128797315debabf170942304c15cb722dda5216aacc3161212513

    • Size

      448KB

    • MD5

      ef8f43251125404bae091cc0c3248355

    • SHA1

      fd2cd90982f25ff3d9e2f4a14aaddafc3d5ce033

    • SHA256

      16fa1b67236128797315debabf170942304c15cb722dda5216aacc3161212513

    • SHA512

      c173c248ac0de6d3aceb91509525b437eca6801f9e6f1bffb1cd09ff6f54e663bc9b8ca282dec3dc2f529044490b1cf7ce7a535281e8d3b964af78248e1c066b

    • SSDEEP

      12288:8fzaBuiszJbE9mO4sl9kVlAOyQkNvOzxo0:8bMmO4sl9sR2Ot/

    Score
    10/10
    emotetepoch1bankerdiscoverytrojan
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks