General
-
Target
9f30f4572aabbaf043659e43faa646619d525947b5ac7142106edf4e9a41136a.zip
-
Size
361KB
-
Sample
230208-lxwmkshe6w
-
MD5
f96aefb99d5fbf6910906a8d948d62cd
-
SHA1
78bb5ac76d8f745ff51f5798b53da54787595436
-
SHA256
7116bfbf6154f3eb831030e81e7339963708706b8cad101ab6f183c73e6885ca
-
SHA512
f2b26bd1921b1ecaa742d6bc13fcd2674623ba15ee24e25363cc652d8c8bc6c0f4bfc424bdb1f52d2d1a5250d21da73e47fac35f9fa787d7b52d2de9e753d319
-
SSDEEP
6144:9KZLzP4FrLiEZ18XNHlUzw/dLev5fHNiZkOCQtWC6PDT1DYF6B7FN5eqJcvfM0Fo:MfP4Frn18XNHlUUZ6MyOR0C6PtDY4B7v
Malware Config
Extracted
emotet
Epoch5
202.28.34.99:8080
80.211.107.116:8080
175.126.176.79:8080
218.38.121.17:443
139.196.72.155:8080
103.71.99.57:8080
87.106.97.83:7080
178.62.112.199:8080
64.227.55.231:8080
46.101.98.60:8080
54.37.228.122:443
128.199.217.206:443
190.145.8.4:443
209.239.112.82:8080
85.214.67.203:8080
198.199.70.22:8080
128.199.242.164:8080
178.238.225.252:8080
103.85.95.4:8080
103.126.216.86:443
Targets
-
-
Target
9f30f4572aabbaf043659e43faa646619d525947b5ac7142106edf4e9a41136a.exe
-
Size
653KB
-
MD5
4dcfe7241ad6bcaa47e98425719d0650
-
SHA1
7e8d235b9dd9ee9ee5c686b8c55488f5813e6386
-
SHA256
9f30f4572aabbaf043659e43faa646619d525947b5ac7142106edf4e9a41136a
-
SHA512
7cc878f5cb2021b8ee6f178f6eda998ba1e51b2b53a7972f8ed06bb64476ac37d1a566c32d670866e7d3af7a32e5e8de82d82a62e5ddbaeae1d1de29077d4512
-
SSDEEP
12288:Ql90FRaaEL/AnteFZyfwXhqRJv+7omWVbAyiEY+tFhPnWirL:QlqaauIIZyIkZyEY+tFhPn3
Score10/10-
Emotet
Emotet is a trojan that is primarily spread through spam emails.
-
Adds Run key to start application
-