Overview

overview

10

Static

static

3

JaffaCakes...c3.dll

windows7-x64

10

JaffaCakes...c3.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_425e23dda18258ee932a5bfc043a00fbd9c853bae5e8912b2d138ce8f24a47c3

  • Size

    832.5MB

  • Sample

    241229-ajzarswmcx

  • MD5

    7e75bb4f31a10e8a105d5089050d33aa

  • SHA1

    3f478afc113e96181dc0e19dce6a1f9b74ac660e

  • SHA256

    425e23dda18258ee932a5bfc043a00fbd9c853bae5e8912b2d138ce8f24a47c3

  • SHA512

    c43bf14e15825fb9c2e5f553eee3f4bb305aff15b30774890b6ad26b2d84695588868753ac6b4885b8f23606a82d1fd93c74874e5b4bc406023bf1213915a7ef

  • SSDEEP

    1572864:ZrScoAt4zlUrScoAt4zlUrScoAt4zlUrS:jz4yz4yz4

Score
10/10
emotetepoch4bankertrojan

Malware Config

Extracted

Family

emotet

Botnet

Epoch4

C2

164.68.99.3:8080

164.90.222.65:443

186.194.240.217:443

1.234.2.232:8080

103.75.201.2:443

187.63.160.88:80

147.139.166.154:8080

91.207.28.33:8080

5.135.159.50:443

153.92.5.27:8080

213.239.212.5:443

103.43.75.120:443

159.65.88.10:8080

167.172.253.162:8080

153.126.146.25:7080

119.59.103.152:8080

107.170.39.149:8080

183.111.227.137:8080

159.89.202.34:443

110.232.117.186:8080
eck1.plain
ecs1.plain

Targets

    • Target

      JaffaCakes118_425e23dda18258ee932a5bfc043a00fbd9c853bae5e8912b2d138ce8f24a47c3

    • Size

      832.5MB

    • MD5

      7e75bb4f31a10e8a105d5089050d33aa

    • SHA1

      3f478afc113e96181dc0e19dce6a1f9b74ac660e

    • SHA256

      425e23dda18258ee932a5bfc043a00fbd9c853bae5e8912b2d138ce8f24a47c3

    • SHA512

      c43bf14e15825fb9c2e5f553eee3f4bb305aff15b30774890b6ad26b2d84695588868753ac6b4885b8f23606a82d1fd93c74874e5b4bc406023bf1213915a7ef

    • SSDEEP

      1572864:ZrScoAt4zlUrScoAt4zlUrScoAt4zlUrS:jz4yz4yz4

    Score
    10/10
    emotetepoch4bankertrojan
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks