General
-
Target
2f48fe1201353745f03e44acf6928f10fc400a59.zip
-
Size
389KB
-
Sample
230421-anfzzsdb38
-
MD5
11f1e12ba48dfb126891040c44bc7e16
-
SHA1
e3d87834a4fd2ad635cc42b75344f99d0bd8352f
-
SHA256
ce6de764748306acdfecef18882422bc786ea52c5afa447d9a278b1bea6ddd81
-
SHA512
da60ce37706114edd3c44fbe4f1f5832fbb887c0bee7a5a74144d1dad1bebf35e0487c1410df64e50ae4ed081aa1eb1ee6a474587de4a049414f916407b4416d
-
SSDEEP
6144:g8/43i1VLGAX4BQYTsBFMpMOPYPNfMKFEMZNRYztRT+R+K4Km9Uzi:N43sVLG4JYwBFbOPwN9FEWQy4Kuki
Malware Config
Extracted
emotet
Epoch4
135.148.121.246:8080
213.190.4.223:7080
175.107.196.192:80
46.55.222.11:443
153.126.203.229:8080
138.185.72.26:8080
45.118.135.203:7080
107.182.225.142:8080
195.154.133.20:443
79.172.212.216:8080
129.232.188.93:443
50.30.40.196:8080
131.100.24.231:80
58.227.42.236:80
216.158.226.206:443
45.118.115.99:8080
51.254.140.238:7080
173.212.193.249:8080
110.232.117.186:8080
81.0.236.90:443
Targets
-
-
Target
2f48fe1201353745f03e44acf6928f10fc400a59.rl
-
Size
664KB
-
MD5
6e7e64a0afbeb239d1217d7bee5d41a1
-
SHA1
2f48fe1201353745f03e44acf6928f10fc400a59
-
SHA256
a8506250d9a0532b403866f5d5d91298bd06dc0826cffe794fdb7f73cd19083f
-
SHA512
e3f8286c1419bb6aa43c6bf9cdc6cf97902eb6a4c092894ca686945f1307ac7adbc943ffd3b6db7639680b3311e5fe65e1c172a3d1f029148ea3742c8c0cce9a
-
SSDEEP
12288:Z6ZLutvgrwV8RQc5W1yS0ezL9J6XKue/vyzfANcN/kJhXx5y:qza8RQc5W1P0Q9sXKuLzflBkn
Score10/10-
Emotet
Emotet is a trojan that is primarily spread through spam emails.
-
Loads dropped DLL
-
Drops file in System32 directory
-