Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
JaffaCakes118_07c72900f0c9805651ada6b7b56c307fd127961d4a2cf403a87e8e730eec6857
-
Size
144KB
-
Sample
241227-a7qnjaxjhj
-
MD5
e5e60f624f81f5bb18cf9078eb3812a2
-
SHA1
78a78dfd542ed3a11ae85edc172308c28a76061c
-
SHA256
07c72900f0c9805651ada6b7b56c307fd127961d4a2cf403a87e8e730eec6857
-
SHA512
1c93f700a194ae4579a94bf29228d4ae33c1a3b8cac96a2750ec43beebce4550c682a9332a710ac63adf0b9ed09516e799db27b25c225fb40159676839e05cc5
-
SSDEEP
1536:S/xB+wuvW7IevFHNJ8A5gp+7njxFS4cxpF9yFS1UjxHdAJFf11RDnE4GK5AdyoXX:c0ByIUsp+7jx0fxpF9XOYFdLnTEyoH
Malware Config
Extracted
emotet
Epoch1
82.76.111.249:443
116.125.120.88:443
217.160.182.191:8080
189.1.185.98:8080
189.194.58.119:80
213.181.91.224:80
219.92.13.25:80
190.6.193.152:8080
61.92.159.208:8080
209.236.123.42:8080
12.162.84.2:8080
190.147.137.153:443
104.131.103.37:8080
212.231.60.98:80
202.62.39.111:80
82.240.207.95:443
170.81.48.2:80
177.74.228.34:80
82.196.15.205:8080
114.109.179.60:80
Targets
-
-
Target
JaffaCakes118_07c72900f0c9805651ada6b7b56c307fd127961d4a2cf403a87e8e730eec6857
-
Size
144KB
-
MD5
e5e60f624f81f5bb18cf9078eb3812a2
-
SHA1
78a78dfd542ed3a11ae85edc172308c28a76061c
-
SHA256
07c72900f0c9805651ada6b7b56c307fd127961d4a2cf403a87e8e730eec6857
-
SHA512
1c93f700a194ae4579a94bf29228d4ae33c1a3b8cac96a2750ec43beebce4550c682a9332a710ac63adf0b9ed09516e799db27b25c225fb40159676839e05cc5
-
SSDEEP
1536:S/xB+wuvW7IevFHNJ8A5gp+7njxFS4cxpF9yFS1UjxHdAJFf11RDnE4GK5AdyoXX:c0ByIUsp+7jx0fxpF9XOYFdLnTEyoH
Score10/10-
Emotet
Emotet is a trojan that is primarily spread through spam emails.
-
Emotet family
-
Emotet payload
Detects Emotet payload in memory.
-