General
-
Target
dffed6c5a66a9160064bb871e7eff65016f6490738daef4efeaab69aa9e5ae39.zip
-
Size
283KB
-
Sample
221113-nla8lsba94
-
MD5
e95bcf94c3259c95d6c29eae89164d4e
-
SHA1
127d1e412b745fdc2f20041d7a2b33ba88e86b3b
-
SHA256
29062da4ab09c29e2be8911e9d5a97b60a55f56e138923ba5cc9f0193776fe5f
-
SHA512
7b719c60fc0f2fad10f5e094470260007fc65cb2e45b08a6ab07f5f770a3b6a9d4879b368e76922cbc2dfffc51374facb0c0a524689bbfc81228ef0f22849730
-
SSDEEP
6144:KfOMrN9OiAx/ZJmaqdFVPz8be6HRJ2yCOFzEq+5pTSOkTva36HWaDnyLl:KfQ7/ZJmaqFQaQRJ2ybFzEq+5J2jaUWl
Malware Config
Extracted
emotet
Epoch5
202.28.34.99:8080
80.211.107.116:8080
175.126.176.79:8080
218.38.121.17:443
139.196.72.155:8080
103.71.99.57:8080
87.106.97.83:7080
178.62.112.199:8080
64.227.55.231:8080
46.101.98.60:8080
54.37.228.122:443
128.199.217.206:443
190.145.8.4:443
209.239.112.82:8080
85.214.67.203:8080
198.199.70.22:8080
128.199.242.164:8080
178.238.225.252:8080
103.85.95.4:8080
103.126.216.86:443
Targets
-
-
Target
dffed6c5a66a9160064bb871e7eff65016f6490738daef4efeaab69aa9e5ae39.exe
-
Size
516KB
-
MD5
d1cfff953f52bdaa4e7baccd695d3601
-
SHA1
cd64a9447638328904eeb67a900d8721da817426
-
SHA256
dffed6c5a66a9160064bb871e7eff65016f6490738daef4efeaab69aa9e5ae39
-
SHA512
f7a71b8b2858ec79e7d9d5835e14c8c0602202800b9400ef7da13ab57afb9dd92fe56c824069af5931016a6d157a725961c856ddd804bea0a0a79e9fce7de9a3
-
SSDEEP
6144:mW1239bnTe+0Qv7NSEBj43USaI6Y/jOpxHRikSYI+QALgIJ1divndEXkn:mW1e9PeexPBjvKSpuvYI+TLgs1dcEXk
Score10/10-
Emotet
Emotet is a trojan that is primarily spread through spam emails.
-
Adds Run key to start application
-