Overview

overview

10

Static

static

3

JaffaCakes...7b.dll

windows7-x64

10

JaffaCakes...7b.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_7b918c433f42eab4254b6861d81e81097f036d3d0a93a30e3aec44a96facfe7b

  • Size

    676KB

  • Sample

    241229-mn1qlszjhm

  • MD5

    6ccfc4c69df3762417add608e6cf3e15

  • SHA1

    97fcdde8b4172ea4fec4bde36091a5d25d640160

  • SHA256

    7b918c433f42eab4254b6861d81e81097f036d3d0a93a30e3aec44a96facfe7b

  • SHA512

    ad07f309bcfdcc9bb9108c6c6195cd9b1b0845d0a0e1a6deb0bd461c677e9858d9decc4d692c1dcd2e5fc8030420d859045e003b1c956fd7296613a6e24139de

  • SSDEEP

    12288:cKjIcj3BvqD7jO1RjeiO5chtEbCwqwQKg64KoI5dr1:cKMc9vI761Rj1WcsdZ5NoI57

Score
10/10
emotetepoch5bankerdiscoverytrojan

Malware Config

Extracted

Family

emotet

Botnet

Epoch5

C2

45.138.98.34:80

69.16.218.101:8080

51.210.242.234:8080

185.148.168.220:8080

142.4.219.173:8080

54.38.242.185:443

191.252.103.16:80

104.131.62.48:8080

62.171.178.147:8080

217.182.143.207:443

168.197.250.14:80

37.44.244.177:8080

66.42.57.149:443

210.57.209.142:8080

159.69.237.188:443

116.124.128.206:8080

128.199.192.135:8080

195.154.146.35:443

185.148.168.15:8080

195.77.239.39:8080
eck1.plain
ecs1.plain

Targets

    • Target

      JaffaCakes118_7b918c433f42eab4254b6861d81e81097f036d3d0a93a30e3aec44a96facfe7b

    • Size

      676KB

    • MD5

      6ccfc4c69df3762417add608e6cf3e15

    • SHA1

      97fcdde8b4172ea4fec4bde36091a5d25d640160

    • SHA256

      7b918c433f42eab4254b6861d81e81097f036d3d0a93a30e3aec44a96facfe7b

    • SHA512

      ad07f309bcfdcc9bb9108c6c6195cd9b1b0845d0a0e1a6deb0bd461c677e9858d9decc4d692c1dcd2e5fc8030420d859045e003b1c956fd7296613a6e24139de

    • SSDEEP

      12288:cKjIcj3BvqD7jO1RjeiO5chtEbCwqwQKg64KoI5dr1:cKMc9vI761Rj1WcsdZ5NoI57

    Score
    10/10
    emotetepoch5bankerdiscoverytrojan
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks