Overview

overview

10

Static

static

3

2024-11-21...id.exe

windows7-x64

10

2024-11-21...id.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-11-21_4a0c8a7e5a20946598452cde85602db0_icedid

  • Size

    296KB

  • Sample

    241121-nkc1tawmfm

  • MD5

    4a0c8a7e5a20946598452cde85602db0

  • SHA1

    a2ea8d19044f9e76d7291e6fcd0b7477f35d8ae5

  • SHA256

    1890d197a6fa4499a7d328af31b3d0a4afb688c4cb5171ccb708c9fd101a0249

  • SHA512

    8ea035ab3b3f199dc24761c81148d04e956d0981fb932fa084ca883de0a02a4b8c1b468ea9ca0f50989f8d623fb207af4a4aa5eb7da29bf9fc2555b0a641ec45

  • SSDEEP

    6144:XvWteOu787c65F2JsdH8FdnC+ZtsRP2JiSgirACfIeXRSgmUk:XueOu7OTUtb3rACwecKk

Score
10/10
emotetepoch1bankerdiscoverytrojan

Malware Config

Extracted

Family

emotet

Botnet

Epoch1

C2

177.23.7.151:80

95.85.33.23:8080

192.232.229.54:7080

46.101.58.37:8080

70.32.115.157:8080

111.67.12.221:8080

98.13.75.196:80

5.196.35.138:7080

74.58.215.226:80

186.70.127.199:8090

1.226.84.243:8080

12.162.84.2:8080

87.106.46.107:8080

60.93.23.51:80

51.255.165.160:8080

45.33.77.42:8080

209.236.123.42:8080

219.92.13.25:80

217.13.106.14:8080

170.81.48.2:80
rsa_pubkey.plain

Targets

    • Target

      2024-11-21_4a0c8a7e5a20946598452cde85602db0_icedid

    • Size

      296KB

    • MD5

      4a0c8a7e5a20946598452cde85602db0

    • SHA1

      a2ea8d19044f9e76d7291e6fcd0b7477f35d8ae5

    • SHA256

      1890d197a6fa4499a7d328af31b3d0a4afb688c4cb5171ccb708c9fd101a0249

    • SHA512

      8ea035ab3b3f199dc24761c81148d04e956d0981fb932fa084ca883de0a02a4b8c1b468ea9ca0f50989f8d623fb207af4a4aa5eb7da29bf9fc2555b0a641ec45

    • SSDEEP

      6144:XvWteOu787c65F2JsdH8FdnC+ZtsRP2JiSgirACfIeXRSgmUk:XueOu7OTUtb3rACwecKk

    Score
    10/10
    emotetepoch1bankerdiscoverytrojan
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks