Overview

overview

10

Static

static

3

JaffaCakes...f0.dll

windows7-x64

10

JaffaCakes...f0.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_d8c08bad5824421ce1178c9b486563496fad50d68c2d7957f38924b440a08cf0

  • Size

    412KB

  • Sample

    241227-b5zdbsylek

  • MD5

    4900c983bd41661728f15c01709756f0

  • SHA1

    2ddce5ea085fe2c7d692c82f7690b071ac48c28d

  • SHA256

    d8c08bad5824421ce1178c9b486563496fad50d68c2d7957f38924b440a08cf0

  • SHA512

    07f7216eeb1f650f6af37091fa0ff00dbb585b1cd666167704182188cfb61def6009a0d0688d34eeb19dfebeda13e88828f220bb15cead14a81550328627e7de

  • SSDEEP

    6144:xLl7XgCt3z4QktK8zm+pTf3l69n2ocEKya5VRCE5KjazSvs4U4FWANhqT8Argj:3bgCOvt9zmufC2ocL5qE8aOvZFQ4RA

Score
10/10
emotetepoch4bankerdiscoverytrojan

Malware Config

Extracted

Family

emotet

Botnet

Epoch4

C2

144.76.186.49:8080

160.16.102.168:80

58.227.42.236:80

158.69.222.101:443

129.232.188.93:443

207.38.84.195:8080

192.254.71.210:443

185.157.82.211:8080

81.0.236.90:443

212.237.17.99:8080

46.55.222.11:443

164.68.99.3:8080

217.182.143.207:443

195.154.133.20:443

216.158.226.206:443

212.237.5.209:443

110.232.117.186:8080

51.15.4.22:443

45.118.115.99:8080

51.38.71.0:443
eck1.plain
ecs1.plain

Targets

    • Target

      JaffaCakes118_d8c08bad5824421ce1178c9b486563496fad50d68c2d7957f38924b440a08cf0

    • Size

      412KB

    • MD5

      4900c983bd41661728f15c01709756f0

    • SHA1

      2ddce5ea085fe2c7d692c82f7690b071ac48c28d

    • SHA256

      d8c08bad5824421ce1178c9b486563496fad50d68c2d7957f38924b440a08cf0

    • SHA512

      07f7216eeb1f650f6af37091fa0ff00dbb585b1cd666167704182188cfb61def6009a0d0688d34eeb19dfebeda13e88828f220bb15cead14a81550328627e7de

    • SSDEEP

      6144:xLl7XgCt3z4QktK8zm+pTf3l69n2ocEKya5VRCE5KjazSvs4U4FWANhqT8Argj:3bgCOvt9zmufC2ocL5qE8aOvZFQ4RA

    Score
    10/10
    emotetepoch4bankerdiscoverytrojan
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks