General
-
Target
0143d8efcf6708fd36b3e2f04579f7fc19414cfb07c1966c502a91af16f46b5c.zip
-
Size
283KB
-
Sample
221114-lm22lsgb86
-
MD5
6a2ecbb74433b8b4569def2a7608742c
-
SHA1
5e76dce5350113258976a9fdfeeb967f1cdfb5e4
-
SHA256
251400232a5cd5528d8015ad3f9994aa9ed69e4d842ac817c0cab018cc775228
-
SHA512
cc5542e30c470b1fdbdd6ec4cf6ed500cd261c482fcbff82988f4854840bff0465fdbf593457b0fea62d0eb281c840a743b446ca088b6e4a7a959a0847522c33
-
SSDEEP
6144:t4FO0OMFGNpY2xZoQRrPMnnwD1kku5xdIe:KFO0VYyujBCU1kkCzh
Malware Config
Extracted
emotet
Epoch5
202.28.34.99:8080
80.211.107.116:8080
175.126.176.79:8080
218.38.121.17:443
139.196.72.155:8080
103.71.99.57:8080
87.106.97.83:7080
178.62.112.199:8080
64.227.55.231:8080
46.101.98.60:8080
54.37.228.122:443
128.199.217.206:443
190.145.8.4:443
209.239.112.82:8080
85.214.67.203:8080
198.199.70.22:8080
128.199.242.164:8080
178.238.225.252:8080
103.85.95.4:8080
103.126.216.86:443
Targets
-
-
Target
0143d8efcf6708fd36b3e2f04579f7fc19414cfb07c1966c502a91af16f46b5c.exe
-
Size
516KB
-
MD5
e0bdbd7a3f91074f29f7ab905edb611a
-
SHA1
2548f2183c6e5ac9ee83b4b4f3fdb50c2f7727b3
-
SHA256
0143d8efcf6708fd36b3e2f04579f7fc19414cfb07c1966c502a91af16f46b5c
-
SHA512
08da8bd7d8a7df25e33129f87b2a7fa2228956765b04f8feddbac598afabd76e826c54694b209a297382963990bee43b22544139a8ea1dc1500854feabf5e153
-
SSDEEP
6144:mW1239bnTe+0Qv7NSEBj43USaI6Y/jOpxHRikSYI+QALgIJ1divndEXrn:mW1e9PeexPBjvKSpuvYI+TLgs1dcEXr
Score10/10-
Emotet
Emotet is a trojan that is primarily spread through spam emails.
-
Adds Run key to start application
-