General
-
Target
b98d90268a0099d0cf8eb7ead181c1709ee7ae4fe31cb29c767a979427d5b015
-
Size
269KB
-
Sample
220708-ykdbpaefcl
-
MD5
61dbedb36877ef450a72fccf84740f42
-
SHA1
5d57ad938aa3921504293f3ecd5a8635116a4366
-
SHA256
b98d90268a0099d0cf8eb7ead181c1709ee7ae4fe31cb29c767a979427d5b015
-
SHA512
96b0341fd404e877afd613439c9f77e971f2683e9c58d348d0e85681bc19f6493ddbd195d14e17dc0245c6ed7cd9b26dc6190d8b54d33483d2c9f114195330c6
Malware Config
Extracted
emotet
Epoch4
94.23.45.86:4143
209.97.163.214:443
212.24.98.99:8080
103.43.75.120:443
183.111.227.137:8080
197.242.150.244:8080
129.232.188.93:443
159.65.88.10:8080
163.44.196.120:8080
51.161.73.194:443
164.90.222.65:443
159.89.202.34:443
1.234.2.232:8080
150.95.66.124:8080
51.91.76.89:8080
196.218.30.83:443
5.9.116.246:8080
146.59.226.45:443
173.212.193.249:8080
213.241.20.155:443
Targets
-
-
Target
b98d90268a0099d0cf8eb7ead181c1709ee7ae4fe31cb29c767a979427d5b015
-
Size
269KB
-
MD5
61dbedb36877ef450a72fccf84740f42
-
SHA1
5d57ad938aa3921504293f3ecd5a8635116a4366
-
SHA256
b98d90268a0099d0cf8eb7ead181c1709ee7ae4fe31cb29c767a979427d5b015
-
SHA512
96b0341fd404e877afd613439c9f77e971f2683e9c58d348d0e85681bc19f6493ddbd195d14e17dc0245c6ed7cd9b26dc6190d8b54d33483d2c9f114195330c6
Score10/10-
Emotet
Emotet is a trojan that is primarily spread through spam emails.
-
suricata: ET MALWARE W32/Emotet CnC Beacon 3
suricata: ET MALWARE W32/Emotet CnC Beacon 3
-