General
-
Target
5f626b07e3b3c247f8f80b7925c4da18ea0e6c6c88172f2e6748b9506d4de360
-
Size
284KB
-
Sample
220606-1b5exscbg2
-
MD5
aeedc615f684f3dee39d44ee8217da78
-
SHA1
2fd0cc76b04e678f5ff3c0aa8c6791fa4591fa36
-
SHA256
5f626b07e3b3c247f8f80b7925c4da18ea0e6c6c88172f2e6748b9506d4de360
-
SHA512
46737acf96af6e98cf25a0da43a922ac2f4c47baa4f61ae10e92b5dc09580bf46fbdeff222218ec53fcc0f9e2db45fe3c74e24f23cf4fc0b4a1de86d4d742589
Malware Config
Extracted
emotet
Epoch4
51.254.140.238:7080
131.100.24.231:80
197.242.150.244:8080
82.165.152.127:8080
110.232.117.186:8080
46.55.222.11:443
31.22.4.160:8080
101.50.0.91:8080
51.91.76.89:8080
160.16.142.56:8080
1.234.21.73:7080
94.23.45.86:4143
5.9.116.246:8080
103.43.75.120:443
45.118.115.99:8080
159.65.88.10:8080
79.137.35.198:8080
115.68.227.76:8080
119.193.124.41:7080
188.44.20.25:443
Targets
-
-
Target
5f626b07e3b3c247f8f80b7925c4da18ea0e6c6c88172f2e6748b9506d4de360
-
Size
284KB
-
MD5
aeedc615f684f3dee39d44ee8217da78
-
SHA1
2fd0cc76b04e678f5ff3c0aa8c6791fa4591fa36
-
SHA256
5f626b07e3b3c247f8f80b7925c4da18ea0e6c6c88172f2e6748b9506d4de360
-
SHA512
46737acf96af6e98cf25a0da43a922ac2f4c47baa4f61ae10e92b5dc09580bf46fbdeff222218ec53fcc0f9e2db45fe3c74e24f23cf4fc0b4a1de86d4d742589
Score10/10-
Emotet
Emotet is a trojan that is primarily spread through spam emails.
-
suricata: ET MALWARE W32/Emotet CnC Beacon 3
suricata: ET MALWARE W32/Emotet CnC Beacon 3
-