General
-
Target
9597be6d9ef59354d8c56f1986a6a4358150c25952324ea0edccd6866f15f7e6
-
Size
313KB
-
Sample
220623-r3f2zadeer
-
MD5
5bef34583fcaecb19ce681ea4baed143
-
SHA1
224c3ac5d61a9cbadac2afcbc9cc4535bbdd9db3
-
SHA256
9597be6d9ef59354d8c56f1986a6a4358150c25952324ea0edccd6866f15f7e6
-
SHA512
267c8115e77d6896b0e66d76e95fffe82b3a29d041b42070a3f7fe393a3359a17001eab362f75651a70a73aeb3aa011133bc3ea06820b0b4255bf3ae9b02f798
Malware Config
Extracted
emotet
62.171.178.147:8080
128.199.217.206:443
85.25.120.45:8080
157.230.99.206:8080
46.101.234.246:8080
196.44.98.190:8080
202.134.4.210:7080
54.37.106.167:8080
175.126.176.79:8080
104.244.79.94:443
103.71.99.57:8080
88.217.172.165:8080
104.248.225.227:8080
198.199.70.22:8080
64.227.55.231:8080
128.199.242.164:8080
195.77.239.39:8080
118.98.72.86:443
54.37.228.122:443
157.245.111.0:8080
Targets
-
-
Target
9597be6d9ef59354d8c56f1986a6a4358150c25952324ea0edccd6866f15f7e6
-
Size
313KB
-
MD5
5bef34583fcaecb19ce681ea4baed143
-
SHA1
224c3ac5d61a9cbadac2afcbc9cc4535bbdd9db3
-
SHA256
9597be6d9ef59354d8c56f1986a6a4358150c25952324ea0edccd6866f15f7e6
-
SHA512
267c8115e77d6896b0e66d76e95fffe82b3a29d041b42070a3f7fe393a3359a17001eab362f75651a70a73aeb3aa011133bc3ea06820b0b4255bf3ae9b02f798
Score10/10-
Emotet
Emotet is a trojan that is primarily spread through spam emails.
-
suricata: ET MALWARE W32/Emotet CnC Beacon 3
suricata: ET MALWARE W32/Emotet CnC Beacon 3
-