Overview

overview

10

Static

static

3

2024-11-21...id.exe

windows7-x64

10

2024-11-21...id.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-11-21_5e197a84931475b8c0380125f7020f7b_icedid

  • Size

    386KB

  • Sample

    241121-lfac1s1fqn

  • MD5

    5e197a84931475b8c0380125f7020f7b

  • SHA1

    d1c45c654a8bd4b6cd2c468130dc79498c6abbf9

  • SHA256

    ad26b64f786f82f314dbffc7e2c60da814ffc1ade98518700c35e4458f324da9

  • SHA512

    7d6afbe41a116c92258b02b1f4e2c0ee0aaafe7265a97017fc61b8c08b3dc1f92e30cf394215698b5d48a1bc9492d6049ff2d8f4a32a80279df8535d5447a3a1

  • SSDEEP

    6144:A53sLlAuORXSAMyd6DssOEl5/zxnt/QJWn+KXKwTCvNjHhETSURKJxjyoA:MMMSAv3El5bxVQJWn/XKaCrKyDmoA

Score
10/10
emotetepoch3bankerdiscoverytrojan

Malware Config

Extracted

Family

emotet

Botnet

Epoch3

C2

176.216.226.44:80

159.203.232.29:8080

185.86.148.68:443

97.104.107.190:80

178.33.167.120:8080

46.105.131.68:8080

78.189.60.109:443

198.57.203.63:8080

153.220.182.49:80

143.95.101.72:8080

105.213.67.88:80

203.153.216.182:7080

77.74.78.80:443

185.208.226.142:8080

188.251.213.180:443

192.163.221.191:8080

172.105.78.244:8080

50.116.78.109:8080

46.32.229.152:8080

201.235.10.215:80
rsa_pubkey.plain

Targets

    • Target

      2024-11-21_5e197a84931475b8c0380125f7020f7b_icedid

    • Size

      386KB

    • MD5

      5e197a84931475b8c0380125f7020f7b

    • SHA1

      d1c45c654a8bd4b6cd2c468130dc79498c6abbf9

    • SHA256

      ad26b64f786f82f314dbffc7e2c60da814ffc1ade98518700c35e4458f324da9

    • SHA512

      7d6afbe41a116c92258b02b1f4e2c0ee0aaafe7265a97017fc61b8c08b3dc1f92e30cf394215698b5d48a1bc9492d6049ff2d8f4a32a80279df8535d5447a3a1

    • SSDEEP

      6144:A53sLlAuORXSAMyd6DssOEl5/zxnt/QJWn+KXKwTCvNjHhETSURKJxjyoA:MMMSAv3El5bxVQJWn/XKaCrKyDmoA

    Score
    10/10
    emotetepoch3bankerdiscoverytrojan
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks