General
-
Target
737cfdada9b96a10c4e365d8c91783f69db0cc00d73bf3775fe1b497d094b822
-
Size
496KB
-
Sample
220521-w4fvtaahd2
-
MD5
320791ecd7ae8e567848485bea07e0eb
-
SHA1
809d17d81e9cf4c2a88e7116392f44b4efb021fb
-
SHA256
737cfdada9b96a10c4e365d8c91783f69db0cc00d73bf3775fe1b497d094b822
-
SHA512
2b1f24a3c64e0a3db5d025f2d39157e5d4551ba2b9a95bbf9b4ae1c875588c98bd3cbbbe83c7089f9c82e37ab19ac50f66711631c09e1b0713ac5a17e529a3de
Malware Config
Extracted
emotet
Epoch3
210.1.219.238:80
162.144.42.60:8080
134.209.193.138:443
68.183.233.80:8080
172.105.78.244:8080
181.113.229.139:443
139.59.12.63:8080
185.142.236.163:443
113.203.250.121:443
74.208.173.91:8080
173.94.215.84:80
31.146.61.34:80
115.78.11.155:80
95.216.205.155:8080
82.239.200.118:80
81.17.93.134:80
179.5.118.12:80
162.249.220.190:80
77.74.78.80:443
24.26.151.3:80
Targets
-
-
Target
737cfdada9b96a10c4e365d8c91783f69db0cc00d73bf3775fe1b497d094b822
-
Size
496KB
-
MD5
320791ecd7ae8e567848485bea07e0eb
-
SHA1
809d17d81e9cf4c2a88e7116392f44b4efb021fb
-
SHA256
737cfdada9b96a10c4e365d8c91783f69db0cc00d73bf3775fe1b497d094b822
-
SHA512
2b1f24a3c64e0a3db5d025f2d39157e5d4551ba2b9a95bbf9b4ae1c875588c98bd3cbbbe83c7089f9c82e37ab19ac50f66711631c09e1b0713ac5a17e529a3de
Score10/10-
Emotet
Emotet is a trojan that is primarily spread through spam emails.
-
suricata: ET MALWARE Win32/Emotet CnC Activity (POST) M9
suricata: ET MALWARE Win32/Emotet CnC Activity (POST) M9
-