General

  • Target

    2024-12-25_81013b11f13b09c998ad71dc744ea9e3_icedid

  • Size

    614KB

  • Sample

    241225-px46hatjhl

  • MD5

    81013b11f13b09c998ad71dc744ea9e3

  • SHA1

    880953a6788dc0c35a94d165382ed7699ed3a631

  • SHA256

    09c5e04b5147cb0477755f6d19a5447c1d8e4bb809bc8e15d93c2b86acb626be

  • SHA512

    900edb47c3c4c388d49013fa45dcc4fed0c172ed11934c328951de262678b3577ffad12fd560e9e49585f2f532d9cbe0d08cc4906213d045502ca20c35bcc2cc

  • SSDEEP

    12288:svsqDXNagEp7/HlYSSJV39hGakE+wu3B+d6:sEqDXNagcDKSSJV3WEjUYd6

Malware Config

Extracted

Family

emotet

Botnet

Epoch1

C2

98.13.75.196:80

91.121.54.71:8080

209.236.123.42:8080

89.32.150.160:8080

212.71.237.140:8080

51.255.165.160:8080

188.135.15.49:80

189.2.177.210:443

45.161.242.102:80

72.167.223.217:8080

77.238.212.227:80

186.70.127.199:8090

45.33.77.42:8080

87.106.46.107:8080

172.104.169.32:8080

187.162.248.237:80

190.163.31.26:80

95.9.180.128:80

71.197.211.156:80

91.219.169.180:80

rsa_pubkey.plain
1
-----BEGIN PUBLIC KEY-----
2
MHwwDQYJKoZIhvcNAQEBBQADawAwaAJhAOZ9fLJ8UrI0OZURpPsR3eijAyfPj3z6
3
uS75f2igmYFW2aWgNcFIzsAYQleKzD0nlCFHOo7Zf8/4wY2UW0CJ4dJEHnE/PHlz
4
6uNk3pxjm7o4eCDyiJbzf+k0Azjl0q54FQIDAQAB
5
-----END PUBLIC KEY-----

Targets

    • Target

      2024-12-25_81013b11f13b09c998ad71dc744ea9e3_icedid

    • Size

      614KB

    • MD5

      81013b11f13b09c998ad71dc744ea9e3

    • SHA1

      880953a6788dc0c35a94d165382ed7699ed3a631

    • SHA256

      09c5e04b5147cb0477755f6d19a5447c1d8e4bb809bc8e15d93c2b86acb626be

    • SHA512

      900edb47c3c4c388d49013fa45dcc4fed0c172ed11934c328951de262678b3577ffad12fd560e9e49585f2f532d9cbe0d08cc4906213d045502ca20c35bcc2cc

    • SSDEEP

      12288:svsqDXNagEp7/HlYSSJV39hGakE+wu3B+d6:sEqDXNagcDKSSJV3WEjUYd6

MITRE ATT&CK Enterprise v15

Tasks

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.