General

  • Target

    2024-11-10_1ea8252bbb8051d974fdba0fc290346f_icedid

  • Size

    460KB

  • Sample

    241110-kakfcssnaz

  • MD5

    1ea8252bbb8051d974fdba0fc290346f

  • SHA1

    e0ee3a8600e587e97a9e2b35cece3c48b21ab33f

  • SHA256

    7a3a40e9e5784b7e3dea87d12d456bf5bacb981ffb33ba3f7264e7742cd853ac

  • SHA512

    958f84187d2f73f00952daf6984217802faa603a90a634b78831bf3995c3c23c369b39fde60fce980286f2611327c9827bbb687419bb57ed013f676058bb4773

  • SSDEEP

    12288:z+8s+bu5TxK6HyTo7ee2e/82NmNRbAx/aFsjQmqJ:1s+C5FPyy2sXxCF1

Malware Config

Extracted

Family

emotet

Botnet

Epoch3

C2

179.15.102.2:80

91.121.200.35:8080

159.203.16.11:8080

188.226.165.170:8080

78.90.78.210:80

181.59.59.54:80

143.95.101.72:8080

61.118.67.173:80

113.203.238.130:80

109.99.146.210:8080

2.58.16.86:8080

50.116.78.109:8080

188.166.220.180:7080

175.103.38.146:80

198.20.228.9:8080

5.2.246.108:80

115.79.195.246:80

187.193.221.143:80

41.76.213.144:8080

180.148.4.130:8080

rsa_pubkey.plain

Targets

    • Target

      2024-11-10_1ea8252bbb8051d974fdba0fc290346f_icedid

    • Size

      460KB

    • MD5

      1ea8252bbb8051d974fdba0fc290346f

    • SHA1

      e0ee3a8600e587e97a9e2b35cece3c48b21ab33f

    • SHA256

      7a3a40e9e5784b7e3dea87d12d456bf5bacb981ffb33ba3f7264e7742cd853ac

    • SHA512

      958f84187d2f73f00952daf6984217802faa603a90a634b78831bf3995c3c23c369b39fde60fce980286f2611327c9827bbb687419bb57ed013f676058bb4773

    • SSDEEP

      12288:z+8s+bu5TxK6HyTo7ee2e/82NmNRbAx/aFsjQmqJ:1s+C5FPyy2sXxCF1

MITRE ATT&CK Enterprise v15

Tasks