General
-
Target
91afb237300fe3820e26db96be5953d4d4cfaa250ab2dec9202c4af276ea1e0dN.exe
-
Size
106KB
-
MD5
b17e4ede59b3ecd01f0cb2a89d206120
-
SHA1
e2f5e014f57058e0ef547dd7f0e9f982ca5f5387
-
SHA256
91afb237300fe3820e26db96be5953d4d4cfaa250ab2dec9202c4af276ea1e0d
-
SHA512
ea95d295474bf4efb69b0d849668e246bf3174c7d4008cca97d69f0e112f1e187a5146facfd42f98003eb7e50ffed069b508efe1900c13b235fd2e246fdc728c
-
SSDEEP
1536:0Ji/gATCb+6xGUW5qq+zIjL7c/XKBmC2V2z1y33P:9/gcCb3E5ayHcCuVG
Malware Config
Extracted
emotet
Epoch1
190.96.15.50:80
192.175.111.214:8080
95.85.33.23:8080
192.232.229.54:7080
200.127.14.97:80
190.188.245.242:80
51.15.7.145:80
138.97.60.140:8080
98.13.75.196:80
213.52.74.198:80
74.58.215.226:80
192.81.38.31:80
191.182.6.118:80
212.71.237.140:8080
209.236.123.42:8080
60.93.23.51:80
178.211.45.66:8080
190.24.243.186:80
62.84.75.50:80
50.121.220.50:80
Signatures
-
Emotet family
-
Emotet payload 1 IoCs
Detects Emotet payload in memory.
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
91afb237300fe3820e26db96be5953d4d4cfaa250ab2dec9202c4af276ea1e0dN.exe
Headers
Sections