General
-
Target
4d35c5532f0cb1feda29bf31ec9346b31e62ef4e65fdbac641287079ca148838
-
Size
266KB
-
Sample
241120-29dkjawenr
-
MD5
0cd23cfb9d859ba2cf3c82eedceed81b
-
SHA1
a89797325fba05faa9db203e7ee982aa685386c1
-
SHA256
4d35c5532f0cb1feda29bf31ec9346b31e62ef4e65fdbac641287079ca148838
-
SHA512
8a3bf6a796d26864c4a976b5c5a405babfadcbdd1175f889e7ffec4bc25c488e3949928cb3d569bfd14f5187a4dc1ead928167b406a016e60c426c9649e0cf06
-
SSDEEP
6144:oknN2QU6/ptQIWPB8xS4GA/mFCo9QNqbqZ:XNZLhy5iS41CCo9QwqZ
Malware Config
Extracted
emotet
Epoch5
186.250.48.5:80
168.119.39.118:443
185.168.130.138:443
190.90.233.66:443
159.69.237.188:443
54.37.228.122:443
93.104.209.107:8080
185.148.168.15:8080
198.199.98.78:8080
87.106.97.83:7080
195.77.239.39:8080
37.44.244.177:8080
54.38.242.185:443
185.184.25.78:8080
116.124.128.206:8080
139.196.72.155:8080
128.199.192.135:8080
103.41.204.169:8080
78.47.204.80:443
68.183.93.250:443
Targets
-
-
Target
b265e323c6560e39eb70ca7b876a7b27b441c9c0249c19a453f565db3e72e143
-
Size
412KB
-
MD5
5569482be8e2a756e40816fc50159db5
-
SHA1
4c7f865418b0b9d72947f8cd5705e60243226664
-
SHA256
b265e323c6560e39eb70ca7b876a7b27b441c9c0249c19a453f565db3e72e143
-
SHA512
65a3d6cfcde6bec231fc070e6ae1787cafbd523e765166f879280e276f64db71168b89d8a717765bfd015a3f4bf74f9c68863e0cc029aed664c02de8d4371e89
-
SSDEEP
6144:aH0RW81UplEIb6hRAOf6DXyhCra81CtS08OB8xS4GE/mFCo3QkgqbqAT:tFpMOfeihCraSuiS4zCCo3QkvqA
Score10/10-
Emotet
Emotet is a trojan that is primarily spread through spam emails.
-
Emotet family
-
Loads dropped DLL
-
Drops file in System32 directory
-