General
-
Target
dettagli_14032023.zip
-
Size
730KB
-
Sample
230314-sd7ztsab3w
-
MD5
773f46b7f335fc62cb3706e1a79244ad
-
SHA1
996f28b6c3c50b0454c1b40cdc53825eaf2702f3
-
SHA256
3400a34f0069659ecacf3ae1e12fa776755392c6828804fa64669e02286a4f4c
-
SHA512
927a41c1e38fcfd86c87db0614fcd4d4fdee3ad2600a2cb03b8a98897362eced71aad7712a5e800f6a694b92f1b49dace06225547184bd3b59500e2ed58af888
-
SSDEEP
6144:SwZnDlMy6O3qKmCRUe1B5uLqcHfVDNUV3nJGM+BTm:ZtDlb6IqXCRUe1BTcH8VIM+Vm
Malware Config
Extracted
emotet
Epoch5
103.85.95.4:8080
103.224.241.74:8080
178.238.225.252:8080
37.59.103.148:8080
78.47.204.80:443
138.197.14.67:8080
128.199.242.164:8080
54.37.228.122:443
37.44.244.177:8080
139.59.80.108:8080
218.38.121.17:443
82.98.180.154:7080
114.79.130.68:443
159.65.135.222:7080
174.138.33.49:7080
195.77.239.39:8080
193.194.92.175:443
198.199.70.22:8080
85.214.67.203:8080
93.84.115.205:7080
Targets
-
-
Target
dettagli_14032023.doc
-
Size
527.4MB
-
MD5
c1299106b5977d3aced43828efd4dae3
-
SHA1
6c740be7700b0de2419e1c9edcfb06dedfc5cd0a
-
SHA256
c41b2b229d37b2581c52e9c87d17838a01e5b2cc038ad4c38c6a8b9bd0e3dc19
-
SHA512
5a6eb6af326b60ab6327581127fcd0d3815a64765b7ed8e1b0bcfb0e990bc85eb8e93c67e7e7bcd8155364ba4aa035548facec1005e9f094ef32e0566bccb6a6
-
SSDEEP
6144:5yk1RgZZXbN63GW1Z7krKSUzMNYJJdKkOl950uH54Lg4Ne9C:5/MXJ6WW1Z7ktUgNYJJdKkOHC4D409
Score10/10-
Emotet
Emotet is a trojan that is primarily spread through spam emails.
-
Process spawned unexpected child process
This typically indicates the parent process was compromised via an exploit or macro.
-
Loads dropped DLL
-