Overview

overview

10

Static

static

3

2024-11-28...id.exe

windows7-x64

10

2024-11-28...id.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-11-28_5f41b0ede1417366c0d1ef384908e0a0_icedid

  • Size

    417KB

  • Sample

    241128-bkl79svmbm

  • MD5

    5f41b0ede1417366c0d1ef384908e0a0

  • SHA1

    72e1266d7bb3fb5227ce89fefd9ce36bc25b17b5

  • SHA256

    4e719c20e65355fed1aefc556ef5257022504a14be7113b08ee5e82212f735c2

  • SHA512

    c4d5c481846f4032e83b0c6b4407ba4ab9f4eb799d65b9d4fe23bc0a7476424670d0e78dd10e133eeeb63ec1cb390c61376fefe140f123829c5126d0274a7b8e

  • SSDEEP

    12288:DsPM4Y3TqBOwUwiHnpU7UXC8UOxQbdGf3:Du27npU7N8UXy3

Score
10/10
emotetepoch3bankerdiscoverytrojan

Malware Config

Extracted

Family

emotet

Botnet

Epoch3

C2

201.212.78.182:80

74.207.230.187:8080

81.214.253.80:443

181.167.35.84:80

195.201.56.70:8080

37.46.129.215:8080

190.251.235.239:80

192.163.221.191:8080

177.0.241.28:80

41.185.29.128:8080

46.105.131.68:8080

78.188.170.128:80

45.118.136.92:8080

163.172.107.70:8080

37.70.131.107:80

177.144.130.105:443

181.230.65.232:80

192.210.217.94:8080

181.164.110.7:80

50.116.78.109:8080
rsa_pubkey.plain

Targets

    • Target

      2024-11-28_5f41b0ede1417366c0d1ef384908e0a0_icedid

    • Size

      417KB

    • MD5

      5f41b0ede1417366c0d1ef384908e0a0

    • SHA1

      72e1266d7bb3fb5227ce89fefd9ce36bc25b17b5

    • SHA256

      4e719c20e65355fed1aefc556ef5257022504a14be7113b08ee5e82212f735c2

    • SHA512

      c4d5c481846f4032e83b0c6b4407ba4ab9f4eb799d65b9d4fe23bc0a7476424670d0e78dd10e133eeeb63ec1cb390c61376fefe140f123829c5126d0274a7b8e

    • SSDEEP

      12288:DsPM4Y3TqBOwUwiHnpU7UXC8UOxQbdGf3:Du27npU7N8UXy3

    Score
    10/10
    emotetepoch3bankerdiscoverytrojan
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks