General
-
Target
dfc8e5c13b9037f04be288d69b2391171f9fcb1560c27800d1d9d116f6583739
-
Size
269KB
-
Sample
220708-14mqksaaep
-
MD5
8b6d973994d1c08115f180e6ca0aa513
-
SHA1
317e3dd801b17e66a494580bfe2f283933fb91f9
-
SHA256
dfc8e5c13b9037f04be288d69b2391171f9fcb1560c27800d1d9d116f6583739
-
SHA512
6a914bb43d048d902295577cba725fd21d29c1df64ab2a7c1e4e2dfcc19e5cd99d94d7bc04eeab6d2aacf8e22a206c75a36563526e47ff773498a1c4ab681099
Malware Config
Extracted
emotet
Epoch4
94.23.45.86:4143
209.97.163.214:443
212.24.98.99:8080
103.43.75.120:443
183.111.227.137:8080
197.242.150.244:8080
129.232.188.93:443
159.65.88.10:8080
163.44.196.120:8080
51.161.73.194:443
164.90.222.65:443
159.89.202.34:443
1.234.2.232:8080
150.95.66.124:8080
51.91.76.89:8080
196.218.30.83:443
5.9.116.246:8080
146.59.226.45:443
173.212.193.249:8080
213.241.20.155:443
Targets
-
-
Target
dfc8e5c13b9037f04be288d69b2391171f9fcb1560c27800d1d9d116f6583739
-
Size
269KB
-
MD5
8b6d973994d1c08115f180e6ca0aa513
-
SHA1
317e3dd801b17e66a494580bfe2f283933fb91f9
-
SHA256
dfc8e5c13b9037f04be288d69b2391171f9fcb1560c27800d1d9d116f6583739
-
SHA512
6a914bb43d048d902295577cba725fd21d29c1df64ab2a7c1e4e2dfcc19e5cd99d94d7bc04eeab6d2aacf8e22a206c75a36563526e47ff773498a1c4ab681099
Score10/10-
Emotet
Emotet is a trojan that is primarily spread through spam emails.
-
suricata: ET MALWARE W32/Emotet CnC Beacon 3
suricata: ET MALWARE W32/Emotet CnC Beacon 3
-