Overview

overview

10

Static

static

3

2024-11-29...id.exe

windows7-x64

10

2024-11-29...id.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-11-29_4f136a9e2f9fba2574de04959eedc12a_icedid

  • Size

    468KB

  • Sample

    241129-bjsnnasrgl

  • MD5

    4f136a9e2f9fba2574de04959eedc12a

  • SHA1

    379ef8b083a81f9f39c483b7e5401adbfcc1d376

  • SHA256

    594a9b230b48f81316bfc3963d949e9385d0f2d25f567f5e78eaa2b4eeb15686

  • SHA512

    bed021a27425f9b79e39d71a610c66f738f37762d2b3759baae42fb0cc4bad6c39c3b48320bf73b36f1317b5befa52a2c742e0e4a02220872bb0934c8f99281c

  • SSDEEP

    6144:ka0lzIF1MpaYcN2PVgQfgfunByqVbuoMdVZBfiUUvX8HQHkd2LDEn+GfzO9+/S97:EEjMpaYk2PuUgfE7byrZB1SR

Score
10/10
emotetepoch2bankerdiscoverytrojan

Malware Config

Extracted

Family

emotet

Botnet

Epoch2

C2

172.91.208.86:80

45.55.36.51:443

91.83.93.99:7080

45.55.219.163:443

107.5.122.110:80

103.86.49.11:8080

85.105.205.77:8080

120.150.60.189:80

137.59.187.107:8080

139.59.60.244:8080

203.117.253.142:80

1.221.254.82:80

97.82.79.83:80

37.187.72.193:8080

139.99.158.11:443

152.168.248.128:443

74.208.45.104:8080

83.169.36.251:8080

169.239.182.217:8080

216.208.76.186:80
rsa_pubkey.plain

Targets

    • Target

      2024-11-29_4f136a9e2f9fba2574de04959eedc12a_icedid

    • Size

      468KB

    • MD5

      4f136a9e2f9fba2574de04959eedc12a

    • SHA1

      379ef8b083a81f9f39c483b7e5401adbfcc1d376

    • SHA256

      594a9b230b48f81316bfc3963d949e9385d0f2d25f567f5e78eaa2b4eeb15686

    • SHA512

      bed021a27425f9b79e39d71a610c66f738f37762d2b3759baae42fb0cc4bad6c39c3b48320bf73b36f1317b5befa52a2c742e0e4a02220872bb0934c8f99281c

    • SSDEEP

      6144:ka0lzIF1MpaYcN2PVgQfgfunByqVbuoMdVZBfiUUvX8HQHkd2LDEn+GfzO9+/S97:EEjMpaYk2PuUgfE7byrZB1SR

    Score
    10/10
    emotetepoch2bankerdiscoverytrojan
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks