General
-
Target
JaffaCakes118_e5012845f6c669504c41cc46e69a1717a4351224f22b8b786282f07a8a2a2c04
-
Size
923KB
-
Sample
241229-eyyp1asmhj
-
MD5
b591f365f91e6d052fd5bab2aeb8b0af
-
SHA1
d5a99e5768e5af29b9993dacb761a588c0b2da62
-
SHA256
e5012845f6c669504c41cc46e69a1717a4351224f22b8b786282f07a8a2a2c04
-
SHA512
17c4e1c2275df19b4c569ce5fa37689048e59e1bf44376c814afbb915f59f1a7c234337adc6ad1891093729df66fe6982e06af3983704ead9ac335cb3d472ce8
-
SSDEEP
12288:QMlCHIWMOZkzNxP+KngRYq3Ocs5PFCJbjhK+pf6f0LqiVN:nCpZkiKngRYbcUYXhK+pf6sLq6
Malware Config
Extracted
emotet
Epoch1
73.116.193.136:80
185.94.252.13:443
149.62.173.247:8080
89.32.150.160:8080
185.94.252.12:80
77.90.136.129:8080
83.169.21.32:7080
104.236.161.64:8080
114.109.179.60:80
189.2.177.210:443
68.183.190.199:8080
144.139.91.187:443
185.94.252.27:443
190.181.235.46:80
82.196.15.205:8080
46.28.111.142:7080
181.167.96.215:80
202.62.39.111:80
219.92.13.25:80
191.99.160.58:80
Targets
-
-
Target
JaffaCakes118_e5012845f6c669504c41cc46e69a1717a4351224f22b8b786282f07a8a2a2c04
-
Size
923KB
-
MD5
b591f365f91e6d052fd5bab2aeb8b0af
-
SHA1
d5a99e5768e5af29b9993dacb761a588c0b2da62
-
SHA256
e5012845f6c669504c41cc46e69a1717a4351224f22b8b786282f07a8a2a2c04
-
SHA512
17c4e1c2275df19b4c569ce5fa37689048e59e1bf44376c814afbb915f59f1a7c234337adc6ad1891093729df66fe6982e06af3983704ead9ac335cb3d472ce8
-
SSDEEP
12288:QMlCHIWMOZkzNxP+KngRYq3Ocs5PFCJbjhK+pf6f0LqiVN:nCpZkiKngRYbcUYXhK+pf6sLq6
Score10/10-
Emotet
Emotet is a trojan that is primarily spread through spam emails.
-
Emotet family
-
Emotet payload
Detects Emotet payload in memory.
-