General
-
Target
486508d6d3da51ce2daf903ffa4e5d0951ad0099fc81b7b80bbc9466ef04711a
-
Size
362KB
-
Sample
220521-xntx6scbf4
-
MD5
d6f264c0052b54a31996afd547275fc4
-
SHA1
cd0fb022465eef1e58a8dd7fd4632193a08f7865
-
SHA256
486508d6d3da51ce2daf903ffa4e5d0951ad0099fc81b7b80bbc9466ef04711a
-
SHA512
787d3b7374861f9092ea5ed071f8bbfcc1a45363974b15759fc31dcc87ae30bab0090ac1d28bb8701495df8d92982ff775420758d44a78d756424c40c3e1dc2a
Malware Config
Extracted
emotet
Epoch5
194.9.172.107:8080
66.42.57.149:443
165.22.73.229:8080
202.29.239.162:443
76.189.152.228:1645
59.185.164.123:8382
115.19.43.159:30377
104.248.225.227:8080
54.38.242.185:443
103.133.214.242:8080
78.47.204.80:443
210.57.209.142:8080
103.41.204.169:8080
118.98.72.86:443
88.217.172.165:8080
87.106.97.83:7080
85.25.120.45:8080
195.77.239.39:8080
37.44.244.177:8080
36.67.23.59:443
Targets
-
-
Target
486508d6d3da51ce2daf903ffa4e5d0951ad0099fc81b7b80bbc9466ef04711a
-
Size
362KB
-
MD5
d6f264c0052b54a31996afd547275fc4
-
SHA1
cd0fb022465eef1e58a8dd7fd4632193a08f7865
-
SHA256
486508d6d3da51ce2daf903ffa4e5d0951ad0099fc81b7b80bbc9466ef04711a
-
SHA512
787d3b7374861f9092ea5ed071f8bbfcc1a45363974b15759fc31dcc87ae30bab0090ac1d28bb8701495df8d92982ff775420758d44a78d756424c40c3e1dc2a
Score10/10-
Emotet
Emotet is a trojan that is primarily spread through spam emails.
-
suricata: ET MALWARE W32/Emotet CnC Beacon 3
suricata: ET MALWARE W32/Emotet CnC Beacon 3
-