General
-
Target
VaSUMBdrHDOLydeF.dll
-
Size
591KB
-
Sample
221119-wcsqasgf4y
-
MD5
850b9a393cd3cc705d5e00561f281f80
-
SHA1
38c58f4241aa38aabfa8ebbbda12b7156ffdb0d0
-
SHA256
723f50d38933c6a619fb171da94a66dc7ef333c25614749bc88f6bde9fb91e58
-
SHA512
8b26276edde3ae225fec8ce2160630aa23c96a9bfbeb7f2353c39430015b1e73847a6b6ca0c469c95d0f798f9a74d2978284c78c952e258a5cd0ca2560af4b1d
-
SSDEEP
6144:zKUMJfdFqzj/HwBjCwruDr3XEkRj0PKXaQm9WhkIaORowoHsODjFb84v:NMJfd0H/6Yr3XERPKXaeCIaOaMOlw4v
Malware Config
Extracted
emotet
Epoch5
202.28.34.99:8080
80.211.107.116:8080
175.126.176.79:8080
218.38.121.17:443
139.196.72.155:8080
103.71.99.57:8080
87.106.97.83:7080
178.62.112.199:8080
64.227.55.231:8080
46.101.98.60:8080
54.37.228.122:443
128.199.217.206:443
190.145.8.4:443
209.239.112.82:8080
85.214.67.203:8080
198.199.70.22:8080
128.199.242.164:8080
178.238.225.252:8080
103.85.95.4:8080
103.126.216.86:443
Targets
-
-
Target
VaSUMBdrHDOLydeF.dll
-
Size
591KB
-
MD5
850b9a393cd3cc705d5e00561f281f80
-
SHA1
38c58f4241aa38aabfa8ebbbda12b7156ffdb0d0
-
SHA256
723f50d38933c6a619fb171da94a66dc7ef333c25614749bc88f6bde9fb91e58
-
SHA512
8b26276edde3ae225fec8ce2160630aa23c96a9bfbeb7f2353c39430015b1e73847a6b6ca0c469c95d0f798f9a74d2978284c78c952e258a5cd0ca2560af4b1d
-
SSDEEP
6144:zKUMJfdFqzj/HwBjCwruDr3XEkRj0PKXaQm9WhkIaORowoHsODjFb84v:NMJfd0H/6Yr3XERPKXaeCIaOaMOlw4v
Score10/10-
Emotet
Emotet is a trojan that is primarily spread through spam emails.
-