Overview

overview

10

Static

static

3

2025-01-12...id.exe

windows7-x64

10

2025-01-12...id.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2025-01-12_899b20bb6f1e24ca3c1ac6c4d19e1cbb_icedid

  • Size

    280KB

  • Sample

    250112-bjn1gazqak

  • MD5

    899b20bb6f1e24ca3c1ac6c4d19e1cbb

  • SHA1

    3004597e2b346f6c324da29fc6ff3e1456dcfb5d

  • SHA256

    1398846d3d896cc59404a555ccd775683c029887d62f7d71600e65395bdec7c8

  • SHA512

    1e373e790f5811c0e45f803706a0cecae055207eec6b320c7ba8bddc664f2beb176945335330c9062ed718277dc2fed2636a25f928fa72a145aee9b1e710592b

  • SSDEEP

    3072:bOXCc4Dm+g2Af8xpoINsRTWKOj8lpPCouN1BBCU2zr7nHJYyWU+L0PRXRlxx9wk9:bZxdtcIGRCPgKN17CUkqzUXv9wkNbG

Score
10/10
emotetepoch2bankerdiscoverytrojan

Malware Config

Extracted

Family

emotet

Botnet

Epoch2

C2

71.208.216.10:80

212.51.142.238:8080

5.39.91.110:7080

109.74.5.95:8080

121.124.124.40:7080

139.130.242.43:80

162.241.92.219:8080

93.156.165.186:80

203.153.216.189:7080

169.239.182.217:8080

78.189.165.52:8080

37.187.72.193:8080

110.145.77.103:80

190.144.18.198:80

209.182.216.177:443

74.208.45.104:8080

209.141.54.221:8080

190.160.53.126:80

87.106.139.101:8080

176.111.60.55:8080
rsa_pubkey.plain

Targets

    • Target

      2025-01-12_899b20bb6f1e24ca3c1ac6c4d19e1cbb_icedid

    • Size

      280KB

    • MD5

      899b20bb6f1e24ca3c1ac6c4d19e1cbb

    • SHA1

      3004597e2b346f6c324da29fc6ff3e1456dcfb5d

    • SHA256

      1398846d3d896cc59404a555ccd775683c029887d62f7d71600e65395bdec7c8

    • SHA512

      1e373e790f5811c0e45f803706a0cecae055207eec6b320c7ba8bddc664f2beb176945335330c9062ed718277dc2fed2636a25f928fa72a145aee9b1e710592b

    • SSDEEP

      3072:bOXCc4Dm+g2Af8xpoINsRTWKOj8lpPCouN1BBCU2zr7nHJYyWU+L0PRXRlxx9wk9:bZxdtcIGRCPgKN17CUkqzUXv9wkNbG

    Score
    10/10
    emotetepoch2bankerdiscoverytrojan
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks