General

  • Target

    JaffaCakes118_ece7a79866d43571d17409b6eb1780f2502419fea8842204e378d6f4a96a3bea

  • Size

    547KB

  • Sample

    241229-d5fx4a1pan

  • MD5

    5853d259cc8e48ecf23e5a4a26fae5b0

  • SHA1

    1bb628a85717d53d7e410be565f8c16c0aefce1e

  • SHA256

    ece7a79866d43571d17409b6eb1780f2502419fea8842204e378d6f4a96a3bea

  • SHA512

    f1db556faef97751c434a1ea33debe0bdc5859fc456c43c184f36561bc2f87ee19198994b01af33e29e0502ae4c3b74edf4e13c3dd1a08d9849b2f99e31140ff

  • SSDEEP

    12288:CXsObgCuH3bm4vOJzXt0t/tVtJtkK51o2:CzMCuH7OJzG19

Malware Config

Extracted

Family

emotet

Botnet

Epoch2

C2

88.153.35.32:80

107.170.146.252:8080

173.212.214.235:7080

167.114.153.111:8080

67.170.250.203:443

121.124.124.40:7080

103.86.49.11:8080

74.214.230.200:80

194.187.133.160:443

172.104.97.173:8080

172.91.208.86:80

200.116.145.225:443

202.134.4.216:8080

172.105.13.66:443

190.164.104.62:80

50.35.17.13:80

176.111.60.55:8080

201.241.127.190:80

66.76.12.94:8080

95.213.236.64:8080

rsa_pubkey.plain

Targets

    • Target

      JaffaCakes118_ece7a79866d43571d17409b6eb1780f2502419fea8842204e378d6f4a96a3bea

    • Size

      547KB

    • MD5

      5853d259cc8e48ecf23e5a4a26fae5b0

    • SHA1

      1bb628a85717d53d7e410be565f8c16c0aefce1e

    • SHA256

      ece7a79866d43571d17409b6eb1780f2502419fea8842204e378d6f4a96a3bea

    • SHA512

      f1db556faef97751c434a1ea33debe0bdc5859fc456c43c184f36561bc2f87ee19198994b01af33e29e0502ae4c3b74edf4e13c3dd1a08d9849b2f99e31140ff

    • SSDEEP

      12288:CXsObgCuH3bm4vOJzXt0t/tVtJtkK51o2:CzMCuH7OJzG19

MITRE ATT&CK Enterprise v15

Tasks