Overview

overview

10

Static

static

3

2024-12-31...id.exe

windows7-x64

10

2024-12-31...id.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-12-31_eac260592bb18970ba7863321b795dfe_icedid

  • Size

    348KB

  • Sample

    241231-r6rmwaxpgk

  • MD5

    eac260592bb18970ba7863321b795dfe

  • SHA1

    fb0f7eff7e2f988aebdf0f93643d51ef2261f467

  • SHA256

    0baa55b5c0dfad0dad41cc824c94cdc56cc081532b744a122027f3bb2cbfbf95

  • SHA512

    e0abe32d0f9818ec4a3369e6498758e4e9305f63c4615dc0e825bb6af74083ce918298c44dc2b7b5f84d01b080f30d97cb9ab149b878028c67aac8eff66ac1b8

  • SSDEEP

    6144:JA+UhzHaeuiv4z9sKXA3ha5M6pZ0Z1kGgOO+sdr+FsrS3EPfc3mWT9GP:JA+UFaexg5seAEM6pO1bDsditEPUH9

Score
10/10
emotetepoch1bankerdiscoverytrojan

Malware Config

Extracted

Family

emotet

Botnet

Epoch1

C2

202.22.141.45:80

37.187.161.206:8080

202.29.239.162:443

80.87.201.221:7080

82.76.111.249:443

216.47.196.104:80

192.241.143.52:8080

192.81.38.31:80

87.106.253.248:8080

64.201.88.132:80

192.241.146.84:8080

12.162.84.2:8080

1.226.84.243:8080

177.129.17.170:443

202.134.4.210:7080

70.169.17.134:80

152.169.22.67:80

5.196.35.138:7080

138.97.60.141:7080

203.205.28.68:80
rsa_pubkey.plain

Targets

    • Target

      2024-12-31_eac260592bb18970ba7863321b795dfe_icedid

    • Size

      348KB

    • MD5

      eac260592bb18970ba7863321b795dfe

    • SHA1

      fb0f7eff7e2f988aebdf0f93643d51ef2261f467

    • SHA256

      0baa55b5c0dfad0dad41cc824c94cdc56cc081532b744a122027f3bb2cbfbf95

    • SHA512

      e0abe32d0f9818ec4a3369e6498758e4e9305f63c4615dc0e825bb6af74083ce918298c44dc2b7b5f84d01b080f30d97cb9ab149b878028c67aac8eff66ac1b8

    • SSDEEP

      6144:JA+UhzHaeuiv4z9sKXA3ha5M6pZ0Z1kGgOO+sdr+FsrS3EPfc3mWT9GP:JA+UFaexg5seAEM6pO1bDsditEPUH9

    Score
    10/10
    emotetepoch1bankerdiscoverytrojan
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks