General
-
Target
a2a51a26ad6f94030050b75214bac4e93ed2e8198872ee38b5dd731df99673eb
-
Size
285KB
-
Sample
241120-w9ql7s1mbx
-
MD5
3734b99554e438d8f4c90f75c3798d6a
-
SHA1
b3f64f618d68285b36c1b100931259ea7433a230
-
SHA256
a2a51a26ad6f94030050b75214bac4e93ed2e8198872ee38b5dd731df99673eb
-
SHA512
f9fadc1d14bbf3c55a37d60119efc22c090a59a010dbd08c19fcc738a19636f50129bc7276cfaf4e3c1d4daf1f20cf330b8597829a755330b3f6fe21e704f32d
-
SSDEEP
6144:7LJmEHQoaG8sQxMG4fxTbv07Zv24jz6NPL7/GkqbscgCG5YqfmP:Z5wZQQCHfNv4v2az6Nv/GkUGCqmP
Malware Config
Extracted
emotet
Epoch5
80.211.107.116:8080
188.166.229.148:443
121.78.112.42:8080
185.148.168.15:8080
210.57.209.142:8080
194.9.172.107:8080
139.196.72.155:8080
128.199.192.135:8080
62.171.178.147:8080
103.133.214.242:8080
104.131.62.48:8080
103.41.204.169:8080
54.37.106.167:8080
217.182.143.207:443
185.148.168.220:8080
202.134.4.210:7080
198.199.98.78:8080
5.56.132.177:8080
66.42.57.149:443
78.46.73.125:443
Targets
-
-
Target
9961f75bcd13750055827870d7f71cd723c4e80d2c31b9b753594ccbdb9368f1
-
Size
494KB
-
MD5
6a014664a0170787fe6e93ea58b528ff
-
SHA1
12306dc060beb3c2c896e152d8ad47f2d955839d
-
SHA256
9961f75bcd13750055827870d7f71cd723c4e80d2c31b9b753594ccbdb9368f1
-
SHA512
d7dae77ca0f38bfdfc7d71d34efda92f92441242f3fdbc61c41006882db52075252198706080924be117a4d1a1bfa4bfb73a2bebb16eb7610646e476ebf237bf
-
SSDEEP
6144:VikzyaB9eoCyx/mEhHB5RYSJ/x6+qiCjzQNPj79GkqbscgCG5qH6scI:VNnCGmyHB5SSJpd0zQN39GkUGQSI
Score10/10-
Emotet
Emotet is a trojan that is primarily spread through spam emails.
-
Emotet family
-
Loads dropped DLL
-
Drops file in System32 directory
-