General
-
Target
583b81d3b866c35272bfb16d6686340b899a7068d694023fc9abcaf0608252e3
-
Size
784KB
-
Sample
220525-kznt3sddam
-
MD5
319a974603641f8ab82f572461299b35
-
SHA1
9fc3bd3b34134145a92bae13895849fec970a849
-
SHA256
583b81d3b866c35272bfb16d6686340b899a7068d694023fc9abcaf0608252e3
-
SHA512
9a937fa225d84992b0c496fb7cb64cf1cd7609bb149836fec38c06c4dac3e8f503d5cfeb74b3ff6e16159a0c406214061b713fdbd16a8395aa3bdcb46a10d0be
Malware Config
Extracted
emotet
Epoch5
194.9.172.107:8080
66.42.57.149:443
165.22.73.229:8080
202.29.239.162:443
104.248.225.227:8080
54.38.242.185:443
103.133.214.242:8080
78.47.204.80:443
210.57.209.142:8080
103.41.204.169:8080
118.98.72.86:443
88.217.172.165:8080
87.106.97.83:7080
85.25.120.45:8080
195.77.239.39:8080
37.44.244.177:8080
36.67.23.59:443
160.16.143.191:7080
54.38.143.246:7080
159.69.237.188:443
Targets
-
-
Target
583b81d3b866c35272bfb16d6686340b899a7068d694023fc9abcaf0608252e3
-
Size
784KB
-
MD5
319a974603641f8ab82f572461299b35
-
SHA1
9fc3bd3b34134145a92bae13895849fec970a849
-
SHA256
583b81d3b866c35272bfb16d6686340b899a7068d694023fc9abcaf0608252e3
-
SHA512
9a937fa225d84992b0c496fb7cb64cf1cd7609bb149836fec38c06c4dac3e8f503d5cfeb74b3ff6e16159a0c406214061b713fdbd16a8395aa3bdcb46a10d0be
Score10/10-
Emotet
Emotet is a trojan that is primarily spread through spam emails.
-
suricata: ET MALWARE W32/Emotet CnC Beacon 3
suricata: ET MALWARE W32/Emotet CnC Beacon 3
-