General
-
Target
62b4e33474fa6ef9e22b8f22b1918315e6ecb6d18066d3b1e7a29181d29323f6.zip
-
Size
290KB
-
Sample
230208-lxyryaaa82
-
MD5
1cd0b08318c2ca6a455009d7385e2449
-
SHA1
855dbbc1c4dfbf4f26c8e6e449148326fbfd4d5f
-
SHA256
ec0e781be8228d0902e529727f4fdf82d2945e9d948fad0ea5efb67e4149bca2
-
SHA512
666e25208ef871ec708716a6c603d8485c0f79d6cbd04353ace84e104e5fe78b8a9ad9dc777072ee3e6f69c3933e372fb07904810f0982a4f7d5582bc2e347c4
-
SSDEEP
6144:ZpsFUzDUdBeAFtV+n27+whm7G7P7GREepkSr9/iYLdOJlscom7sTxoei:ZpssDUdBegtV+n2iwYKSRvl//LdOJycH
Malware Config
Extracted
emotet
Epoch5
198.199.126.144:443
103.42.57.17:8080
195.154.146.35:443
104.131.62.48:8080
116.124.128.206:8080
54.38.242.185:443
217.182.143.207:443
66.42.57.149:443
185.148.168.220:8080
37.44.244.177:8080
78.47.204.80:443
173.203.78.138:443
190.90.233.66:443
203.153.216.46:443
54.37.106.167:8080
194.9.172.107:8080
168.197.250.14:80
185.184.25.78:8080
191.252.103.16:80
159.69.237.188:443
Targets
-
-
Target
62b4e33474fa6ef9e22b8f22b1918315e6ecb6d18066d3b1e7a29181d29323f6.dll
-
Size
514KB
-
MD5
5397887cac09d8d9f50871894ada5dfb
-
SHA1
67a4b778ddc036e85d64585965f2cb2fb9bc699d
-
SHA256
62b4e33474fa6ef9e22b8f22b1918315e6ecb6d18066d3b1e7a29181d29323f6
-
SHA512
55a5655e5d7ed6f84ad024eb1b58c0ffc31e957c16782acd49b3cc1a3b0515ff7e742c1247fd2dae9ebe11989f21bdc4c08a8dd9b7c2b4db51bfafb194a675f7
-
SSDEEP
6144:LVvauc175GwSlLaD0adqHQFHQFHQFHQFHQZcH+J8aLi/ZnZLtO/ydWp3kklPSiNO:LViuc175Gw/DtcUKmvJSYCQqTI
Score10/10-
Emotet
Emotet is a trojan that is primarily spread through spam emails.
-