General
-
Target
fbc115dc9e79343856fc647ffd9c86b089d81fa33c6ecb607dfcd9b362bab2b2
-
Size
932KB
-
Sample
220225-w6p69sacdq
-
MD5
07d1857a8e92333779599fe55dc18ffe
-
SHA1
96336381d75bd9699fc54d18918b57041c3ff033
-
SHA256
fbc115dc9e79343856fc647ffd9c86b089d81fa33c6ecb607dfcd9b362bab2b2
-
SHA512
e5638f5c69041bc8141d6f3ac71fa141ed2620c060932fafbfadd617e3b99a4d7d375122e56da12a8fdb2215c629670910bf07841d3765177eecbbfedc5ec71a
Malware Config
Extracted
emotet
Epoch4
169.197.131.16:8080
195.154.253.60:8080
152.89.239.34:443
216.158.226.206:443
159.65.88.10:8080
209.126.98.206:8080
158.69.222.101:443
173.212.193.249:8080
185.157.82.211:8080
81.0.236.90:443
103.75.201.2:443
46.55.222.11:443
159.8.59.82:8080
207.38.84.195:8080
50.116.54.215:443
79.172.212.216:8080
212.237.17.99:8080
212.24.98.99:8080
178.79.147.66:8080
51.254.140.238:7080
Targets
-
-
Target
fbc115dc9e79343856fc647ffd9c86b089d81fa33c6ecb607dfcd9b362bab2b2
-
Size
932KB
-
MD5
07d1857a8e92333779599fe55dc18ffe
-
SHA1
96336381d75bd9699fc54d18918b57041c3ff033
-
SHA256
fbc115dc9e79343856fc647ffd9c86b089d81fa33c6ecb607dfcd9b362bab2b2
-
SHA512
e5638f5c69041bc8141d6f3ac71fa141ed2620c060932fafbfadd617e3b99a4d7d375122e56da12a8fdb2215c629670910bf07841d3765177eecbbfedc5ec71a
Score10/10-
Emotet
Emotet is a trojan that is primarily spread through spam emails.
-
suricata: ET MALWARE W32/Emotet CnC Beacon 3
suricata: ET MALWARE W32/Emotet CnC Beacon 3
-
Drops file in System32 directory
-