General
-
Target
ec0a232019403da84e5272a3e6d45d95e2156b5e720b2b081162aca5e2482d79
-
Size
362KB
-
Sample
220521-vatn5sacb8
-
MD5
0755b8ce342da91e531957dcd21014d4
-
SHA1
29ce0cc9f10bc30d9535eddf2c400c9d89e863f3
-
SHA256
ec0a232019403da84e5272a3e6d45d95e2156b5e720b2b081162aca5e2482d79
-
SHA512
67f36a329dc9a30e611eaa47200789229e20b033be5ff91a29e3c6f2d1e69ee36891475c55101d3b162e06df6a1e5b67977d710920f28d0abb6ff866201a6ff4
Malware Config
Extracted
emotet
Epoch5
194.9.172.107:8080
66.42.57.149:443
165.22.73.229:8080
202.29.239.162:443
76.189.152.228:1645
59.185.164.123:8382
115.19.43.159:30377
104.248.225.227:8080
54.38.242.185:443
103.133.214.242:8080
78.47.204.80:443
210.57.209.142:8080
103.41.204.169:8080
118.98.72.86:443
88.217.172.165:8080
87.106.97.83:7080
85.25.120.45:8080
195.77.239.39:8080
37.44.244.177:8080
36.67.23.59:443
Targets
-
-
Target
ec0a232019403da84e5272a3e6d45d95e2156b5e720b2b081162aca5e2482d79
-
Size
362KB
-
MD5
0755b8ce342da91e531957dcd21014d4
-
SHA1
29ce0cc9f10bc30d9535eddf2c400c9d89e863f3
-
SHA256
ec0a232019403da84e5272a3e6d45d95e2156b5e720b2b081162aca5e2482d79
-
SHA512
67f36a329dc9a30e611eaa47200789229e20b033be5ff91a29e3c6f2d1e69ee36891475c55101d3b162e06df6a1e5b67977d710920f28d0abb6ff866201a6ff4
Score10/10-
Emotet
Emotet is a trojan that is primarily spread through spam emails.
-
suricata: ET MALWARE W32/Emotet CnC Beacon 3
suricata: ET MALWARE W32/Emotet CnC Beacon 3
-