General

  • Target

    2024-02-11_f550d496b0dd9a65b17ed26e36de6271_icedid

  • Size

    460KB

  • Sample

    240211-m2hf7afe21

  • MD5

    f550d496b0dd9a65b17ed26e36de6271

  • SHA1

    71607d6ea852e705cb39fd4220ea8d272be9acc3

  • SHA256

    4aa0ab8046291cda09bd733a69b2fd7254f01ba6905dd2463d8dd84c1bd1d449

  • SHA512

    01b1d09d6a12398eb07d0eca0298d667686745b55bcaf7cda9ae5e645817c44403b64e6094970111edf76edf46bfee4c72d6314466508561681a77102ccad7b3

  • SSDEEP

    12288:r+8s+bu5TxK6HyT37ee2e/82NmNRbAx/aFsjQmqJ:ts+C5FPyF2sXxCF1

Malware Config

Extracted

Family

emotet

Botnet

Epoch3

C2

179.15.102.2:80

91.121.200.35:8080

159.203.16.11:8080

188.226.165.170:8080

78.90.78.210:80

181.59.59.54:80

143.95.101.72:8080

61.118.67.173:80

113.203.238.130:80

109.99.146.210:8080

2.58.16.86:8080

50.116.78.109:8080

188.166.220.180:7080

175.103.38.146:80

198.20.228.9:8080

5.2.246.108:80

115.79.195.246:80

187.193.221.143:80

41.76.213.144:8080

180.148.4.130:8080

rsa_pubkey.plain

Targets

    • Target

      2024-02-11_f550d496b0dd9a65b17ed26e36de6271_icedid

    • Size

      460KB

    • MD5

      f550d496b0dd9a65b17ed26e36de6271

    • SHA1

      71607d6ea852e705cb39fd4220ea8d272be9acc3

    • SHA256

      4aa0ab8046291cda09bd733a69b2fd7254f01ba6905dd2463d8dd84c1bd1d449

    • SHA512

      01b1d09d6a12398eb07d0eca0298d667686745b55bcaf7cda9ae5e645817c44403b64e6094970111edf76edf46bfee4c72d6314466508561681a77102ccad7b3

    • SSDEEP

      12288:r+8s+bu5TxK6HyT37ee2e/82NmNRbAx/aFsjQmqJ:ts+C5FPyF2sXxCF1

    • Emotet

      Emotet is a trojan that is primarily spread through spam emails.

    • Emotet payload

      Detects Emotet payload in memory.

MITRE ATT&CK Matrix

Tasks