General
-
Target
493a9ab2b8dbbb88ec67da1455fb983863bd05c9f77ca1585989481b7957965a
-
Size
530KB
-
Sample
241120-w5wyes1aje
-
MD5
fd24684bb5d5795fea324ba6408b2e9b
-
SHA1
6cb99d53b75e8cb2a93aa492f08eb5ba62056036
-
SHA256
493a9ab2b8dbbb88ec67da1455fb983863bd05c9f77ca1585989481b7957965a
-
SHA512
61a96b6b82be84aa64be6f2e3e386d439d8ad62d392704a2cbcb90791a5a9e13ef61d378beb8dba88b1babbf49b765f3b6309b7fd1c820e15542d686a61377cf
-
SSDEEP
12288:rOtPhWZr36fW65GaxSnxoKR6sNOtsRCoWX30:+ur3CW6VcxZTNOtsRi30
Malware Config
Extracted
emotet
Epoch4
217.182.143.248:8080
185.4.135.27:8080
192.99.251.50:443
146.59.226.45:443
162.214.118.104:8080
195.154.133.20:443
103.75.201.2:443
5.9.116.246:8080
177.87.70.10:8080
31.24.158.56:8080
103.75.201.4:443
158.69.222.101:443
185.157.82.211:8080
185.8.212.130:7080
186.250.48.117:7080
110.232.117.186:8080
46.55.222.11:443
196.218.30.83:443
51.91.7.5:8080
176.56.128.118:443
Targets
-
-
Target
34f3c3c4bb63b2786f137fb17e943a0ea9abb8dc2a74da27c5d4b480525856fc
-
Size
1004KB
-
MD5
9fd3483e25834b4d22840bddad147f75
-
SHA1
10e508e3ae9220c99e02c790ff2db4deca5b4cff
-
SHA256
34f3c3c4bb63b2786f137fb17e943a0ea9abb8dc2a74da27c5d4b480525856fc
-
SHA512
daa777a38ba27e82bb6d4b210991eea186901f0f9cb01be6d548006572a9f29fb456a012d4aba4c27b2cf9ac01da9ef58647ab95cfedb9d7274042a4d0c8da41
-
SSDEEP
12288:AFFTO6oyclOdChc3cA5D1mJiQiHYvVP6FuR6shQLj88F+Krf6:v6oycln8cACimP68ThQjrf
Score10/10-
Emotet
Emotet is a trojan that is primarily spread through spam emails.
-
Emotet family
-
Loads dropped DLL
-
Drops file in System32 directory
-