General
-
Target
3a18784e58ef8d4c3de7d65e46b64ef72a0e6cabe37d1e06aab3e8d279edd506
-
Size
266KB
-
Sample
241120-xz2r6asdpq
-
MD5
b2f2b32cc0e643e56b71eafdb8df21e6
-
SHA1
28ebe3099efc8bd2e6c0c85c96d7ec028ee8131c
-
SHA256
3a18784e58ef8d4c3de7d65e46b64ef72a0e6cabe37d1e06aab3e8d279edd506
-
SHA512
f5e58c1ccd88cf05a504c8687c2987af06cf9d0827a215e4d0e50471c1136ccdcf2d404d5dfef150bf1d1bad58c98c838404ecde3e72c25e529ddee587ba5dc8
-
SSDEEP
6144:VknN2QU6/ptQQlNceWB8xS4GA/mFCo9QNqbqg:KNZLhnkeGiS41CCo9Qwqg
Malware Config
Extracted
emotet
Epoch5
186.250.48.5:80
168.119.39.118:443
185.168.130.138:443
190.90.233.66:443
159.69.237.188:443
54.37.228.122:443
93.104.209.107:8080
185.148.168.15:8080
198.199.98.78:8080
87.106.97.83:7080
195.77.239.39:8080
37.44.244.177:8080
54.38.242.185:443
185.184.25.78:8080
116.124.128.206:8080
139.196.72.155:8080
128.199.192.135:8080
103.41.204.169:8080
78.47.204.80:443
68.183.93.250:443
Targets
-
-
Target
8eeadb1356ba1f5ab27a68ba995325c67461e5af2687a4305efab4fd7bc084f6
-
Size
412KB
-
MD5
56821ebbac9eb66693ef611131eea62d
-
SHA1
4d48c8ea12d7b7159183cb127df652e8db7ce6ab
-
SHA256
8eeadb1356ba1f5ab27a68ba995325c67461e5af2687a4305efab4fd7bc084f6
-
SHA512
3e26f5ccc5598cadef67e53f5865dc169b8a7a9a1be6c82a70d5f61aa8846a98d2c784038bf9dfb7a2ef75f41ca33cdf81a6b29c9e4cc8dde40b658813f8d843
-
SSDEEP
6144:aH0RW81UplEIb6hRAOf6DXyhCra8dCtS08OB8xS4GE/mFCo3QkgqbqAT:tFpMOfeihCramuiS4zCCo3QkvqA
Score10/10-
Emotet
Emotet is a trojan that is primarily spread through spam emails.
-
Emotet family
-
Loads dropped DLL
-
Drops file in System32 directory
-