General
-
Target
ed78faa42b5542865db53c17713bb468ff4c9ca1ab3b5ff464aec38029a63ee1.zip
-
Size
283KB
-
Sample
221124-rf3x8ach5y
-
MD5
686c37cc7d3709a806ee88ff23ca04cb
-
SHA1
d439f62b6c35b343093f998336a4e277384c9f6e
-
SHA256
9ea379d217f9217037a37f85a52a7bc63467bd0373c78ab477715c614c9a991c
-
SHA512
6797d940e1539b60337bebee814dbeeed61e867d8303b89c398f39c60a76033502b042bdcbd5e120fd4f74a0ba7eef6834bfd8f25b809b66092faf93fbb825a3
-
SSDEEP
6144:HYFLDEMtJNxC4ZKdWjgx+aCdUaPYrMfrVTGe1fyCDdaV9/:uLDEM184kYICmaPaOf1fBaV9/
Malware Config
Extracted
emotet
Epoch5
202.28.34.99:8080
80.211.107.116:8080
175.126.176.79:8080
218.38.121.17:443
139.196.72.155:8080
103.71.99.57:8080
87.106.97.83:7080
178.62.112.199:8080
64.227.55.231:8080
46.101.98.60:8080
54.37.228.122:443
128.199.217.206:443
190.145.8.4:443
209.239.112.82:8080
85.214.67.203:8080
198.199.70.22:8080
128.199.242.164:8080
178.238.225.252:8080
103.85.95.4:8080
103.126.216.86:443
Targets
-
-
Target
ed78faa42b5542865db53c17713bb468ff4c9ca1ab3b5ff464aec38029a63ee1.exe
-
Size
516KB
-
MD5
7e0958686f01230fee3c6bdaa3307f04
-
SHA1
3b4de987e389a956249a8124d10e7b82e2ac1bf0
-
SHA256
ed78faa42b5542865db53c17713bb468ff4c9ca1ab3b5ff464aec38029a63ee1
-
SHA512
368c90172334913f2af7462d01481d64904bd4677f45f69d594d2608719c210de70e3cd4d93fdfca94d059703cc91f6ca8a33821a8363a6332529aba8cfddee6
-
SSDEEP
6144:mW1239bnTe+0Qv7NSEBj43USaI6Y/jOpxHRikSYI+QALgIJ1divndEXNn:mW1e9PeexPBjvKSpuvYI+TLgs1dcEXN
Score10/10-
Emotet
Emotet is a trojan that is primarily spread through spam emails.
-
Adds Run key to start application
-