General

  • Target

    2024-11-22_7392fb8ed0ea7858f51e9f7cfbb4400f_icedid

  • Size

    248KB

  • Sample

    241122-b9c1ws1rbt

  • MD5

    7392fb8ed0ea7858f51e9f7cfbb4400f

  • SHA1

    ddbd9308af2cb04197a3db921d39ef27da21d355

  • SHA256

    ac3d79cb933b48ff2b4d855be82d2223d74552e99bc361cad3cb51231d214d5a

  • SHA512

    ec08cf3bc627370bc509ab0faf75223b4eb534ed6392e4a94842733fa132c17e258cf657a3acc16ddebd3810a8b98ff2c403b8023c5ddff3affe2c4b7448b568

  • SSDEEP

    3072:B4pkArp0yocpcIDt+9bADzccj51VvsOQT/5aQr7d9lcPpOiGGaaDVU1RIMvP51D:B4pdrp0UPDtxUkVGRaQmpOZOq1RZvP

Malware Config

Extracted

Family

emotet

Botnet

Epoch2

C2

68.44.137.144:443

69.30.203.214:8080

67.205.85.243:8080

79.98.24.39:8080

5.196.74.210:8080

188.83.220.2:443

109.116.214.124:443

203.117.253.142:80

104.131.11.150:443

97.82.79.83:80

121.124.124.40:7080

83.169.36.251:8080

89.186.91.200:443

70.167.215.250:8080

204.197.146.48:80

167.86.90.214:8080

190.160.53.126:80

95.213.236.64:8080

47.144.21.12:443

169.239.182.217:8080

rsa_pubkey.plain

Targets

    • Target

      2024-11-22_7392fb8ed0ea7858f51e9f7cfbb4400f_icedid

    • Size

      248KB

    • MD5

      7392fb8ed0ea7858f51e9f7cfbb4400f

    • SHA1

      ddbd9308af2cb04197a3db921d39ef27da21d355

    • SHA256

      ac3d79cb933b48ff2b4d855be82d2223d74552e99bc361cad3cb51231d214d5a

    • SHA512

      ec08cf3bc627370bc509ab0faf75223b4eb534ed6392e4a94842733fa132c17e258cf657a3acc16ddebd3810a8b98ff2c403b8023c5ddff3affe2c4b7448b568

    • SSDEEP

      3072:B4pkArp0yocpcIDt+9bADzccj51VvsOQT/5aQr7d9lcPpOiGGaaDVU1RIMvP51D:B4pdrp0UPDtxUkVGRaQmpOZOq1RZvP

MITRE ATT&CK Enterprise v15

Tasks