General

  • Target

    2024-02-12_61cd7f3d1efb5b18f40fccea7e6a5ec7_icedid

  • Size

    373KB

  • Sample

    240212-v6911aaf5v

  • MD5

    61cd7f3d1efb5b18f40fccea7e6a5ec7

  • SHA1

    dfc2af2babfff1903a046346f74ebc7f69eda18d

  • SHA256

    5a96b265cf8ff5c253c988ec242d33ef371119a8850558e76769b8104d7e195a

  • SHA512

    00ed8dccf296bfe87db37c578f1634cebf4944fc323c0963093147ab23b8883fae958dadeba3687ac582e87d358ccf2f91362373daf8b6674827513236458a7c

  • SSDEEP

    6144:8fC9GB4O2eVC3jCGtct0C0Ct6bEPEqzjRbgCOLN:8T2MCOGySC0REP4

Malware Config

Extracted

Family

emotet

Botnet

Epoch3

C2

221.147.142.214:80

188.40.170.197:80

51.38.50.144:8080

46.22.116.163:7080

190.151.5.131:443

58.27.215.3:8080

179.5.118.12:80

73.100.19.104:80

192.210.217.94:8080

192.163.221.191:8080

103.93.220.182:80

91.213.106.100:8080

190.192.39.136:80

115.79.59.157:80

190.164.135.81:80

91.83.93.103:443

188.166.220.180:7080

116.202.10.123:8080

36.91.44.183:80

77.74.78.80:443

rsa_pubkey.plain

Targets

    • Target

      2024-02-12_61cd7f3d1efb5b18f40fccea7e6a5ec7_icedid

    • Size

      373KB

    • MD5

      61cd7f3d1efb5b18f40fccea7e6a5ec7

    • SHA1

      dfc2af2babfff1903a046346f74ebc7f69eda18d

    • SHA256

      5a96b265cf8ff5c253c988ec242d33ef371119a8850558e76769b8104d7e195a

    • SHA512

      00ed8dccf296bfe87db37c578f1634cebf4944fc323c0963093147ab23b8883fae958dadeba3687ac582e87d358ccf2f91362373daf8b6674827513236458a7c

    • SSDEEP

      6144:8fC9GB4O2eVC3jCGtct0C0Ct6bEPEqzjRbgCOLN:8T2MCOGySC0REP4

    • Emotet

      Emotet is a trojan that is primarily spread through spam emails.

    • Emotet payload

      Detects Emotet payload in memory.

MITRE ATT&CK Matrix

Tasks