Resubmissions

13-09-2023 20:47

230913-zk1mnahe68 10

13-09-2023 19:55

230913-ym9snsef2y 10

13-09-2023 19:49

230913-yjtbhshc66 3

General

  • Target

    2023-03-22-Emotet-malware-samples.zip

  • Size

    1.9MB

  • MD5

    dd96bc22ea8919bcc30d7c3313b29103

  • SHA1

    eede57aad77bb1737e9c37b90afee1ea3931e8ec

  • SHA256

    52380fa4188daab8d7e884c71da9e39e80048d7cfe373d0a5e197bd14fb43521

  • SHA512

    ef17e4fa93445efcc0e2376dbe37d183e8b5663fe1f39a3b6851c465ec230651eb2595bb60999590bf9f367a99ba28de19fb2043028dd83a8c4d7e7a482c6368

  • SSDEEP

    49152:OKW7tMAJ3GGKDTGiIyFHw3J+IriiGJ+6GO:TW7tMkqT7Hw3J+ein86GO

Score
3/10

Malware Config

Signatures

  • Unsigned PE 3 IoCs

    Checks for missing Authenticode signature.

Files

  • 2023-03-22-Emotet-malware-samples.zip
    .zip

    Password: infected

  • 2023-03-22-example-of-zip-from-erkaradyator.com.tr.bin
    .zip

    Password: infected

  • q7BQAFT0.dll
    .dll regsvr32 windows x64

    Password: infected

    d76ae4775a3b5cab14b414b04192c713


    Headers

    Imports

    Exports

    Sections

  • 2023-03-22-example-of-zip-from-esentai-gourmet.kz.bin
    .zip

    Password: infected

  • RAddjxpwj24w2YPhNNlkljCCW1mNl.dll
    .dll regsvr32 windows x64

    Password: infected

    d76ae4775a3b5cab14b414b04192c713


    Headers

    Imports

    Exports

    Sections

  • 2023-03-22-example-of-zip-from-panel.chatzy.in.bin
    .zip

    Password: infected

  • HPKhTEMLxAwWRn14Bn9w1Sj9aW00.dll
    .dll regsvr32 windows x64

    Password: infected

    d76ae4775a3b5cab14b414b04192c713


    Headers

    Imports

    Exports

    Sections

  • 2023-03-22-some-IOCs-for-Emotet-E4-activity.txt
  • Electronic form 03.22.2023.one
    .one .vbs
  • W-9 Dt 03.22.2023.one
    .one .vbs
  • doc_0322.one
    .one .vbs
  • form 03.22.2023 Gmail.one
    .one .vbs
  • press to unblock document.vbs
    .vbs