General
-
Target
1cd57050ed9c6654ffe89a96596dbf4e295b1ee3ec00609ef682adf6fba8601f.zip
-
Size
73KB
-
Sample
231022-vkgsbsdb68
-
MD5
f49b8502fdf30b71fe9ac5e9072be8ff
-
SHA1
fb32d7b1a5d9b5f5b31672cf7003425ae0f66bf4
-
SHA256
bb3a4cb00d1e3b7fe14642cad1eb4acebf6260f16f14c698e6b9a9fce69acdc9
-
SHA512
7d01505e72e98f0b9b24166d063c8c21aa01a495e510c6363faa651b5502b3048fcd8fee534efb769d4fe01d7705488e9483c735f9ec37e1d8db34c9ecbeacee
-
SSDEEP
1536:uu/Foyj0tRKHQOv+UNxzQMIhB0M4GYeM/w8atjEW7/0+ok7:1+i0tYw8nan0kMPDgR7
Malware Config
Extracted
emotet
Epoch3
125.0.215.60:80
163.53.204.180:443
89.163.210.141:8080
203.157.152.9:7080
157.245.145.87:443
82.78.179.117:443
85.247.144.202:80
37.46.129.215:8080
110.37.224.243:80
192.210.217.94:8080
2.82.75.215:80
69.159.11.38:443
188.166.220.180:7080
103.93.220.182:80
198.20.228.9:8080
91.75.75.46:80
88.247.30.64:80
189.211.214.19:443
203.160.167.243:80
178.33.167.120:8080
Targets
-
-
Target
1cd57050ed9c6654ffe89a96596dbf4e295b1ee3ec00609ef682adf6fba8601f.dll
-
Size
117KB
-
MD5
3464d1af70e8ff74525e87c6cebd0e6d
-
SHA1
f6df5ab3d5a064ecce91e1e0ae39821f346ff53a
-
SHA256
1cd57050ed9c6654ffe89a96596dbf4e295b1ee3ec00609ef682adf6fba8601f
-
SHA512
b805bd05e9bf204636df7e7430381e04ffbfb04e74165622a71428cb6cf3ede45d84bdfd870c515fa73067a2651c32c80b3ffdcf0820aa98be9b7f56534584fe
-
SSDEEP
1536:WuYPPzq3ZTRgSOrPTjy8sRgXhSJufpUL/P9jl00Ieoll/l6x3I4PipaMPtlVI3ui:WtPPusjfjy8suUlpAv0x+76+v8T5XDH
Score10/10-
Emotet
Emotet is a trojan that is primarily spread through spam emails.
-
Blocklisted process makes network request
-
Loads dropped DLL
-
Drops file in System32 directory
-