General

  • Target

    2025-01-13_afdd4593ddaebf00651dd13334e48343_icedid

  • Size

    341KB

  • Sample

    250113-x3fdbswrdk

  • MD5

    afdd4593ddaebf00651dd13334e48343

  • SHA1

    3dd9b37f7c6c1176c4a9adb49e129b38296e1872

  • SHA256

    57147a7fd366deeb3b7a61e5fb21c1a34351ce6c2de9e6f523e734db783df431

  • SHA512

    b509b519cf7b43a1a940536eff75a5fdc47e2ef84c13d2297e36450d85388c9b10ff2c5c49074d411bd20a358f350b66ad308397377d28fd6daeada6697a34e1

  • SSDEEP

    6144:FqT+5a/xBsa0T98E1YNmdezRXrjr6JFs7yHIRFC//m4hLmUVagW8uDnK1LFKK5BJ:0sa22aezRXrjrNpRFsCJDQL7BJ

Malware Config

Extracted

Family

emotet

Botnet

Epoch1

C2

181.58.181.9:80

190.251.216.100:80

54.36.185.60:80

202.79.24.136:443

111.67.12.222:8080

190.195.129.227:8090

12.162.84.2:8080

80.15.100.37:80

45.16.226.117:443

62.84.75.50:80

178.250.54.208:8080

188.135.15.49:80

103.236.179.162:80

181.120.29.49:80

68.183.170.114:8080

111.67.12.221:8080

197.232.36.108:80

185.183.16.47:80

94.23.62.116:8080

200.24.255.23:80

rsa_pubkey.plain

Targets

    • Target

      2025-01-13_afdd4593ddaebf00651dd13334e48343_icedid

    • Size

      341KB

    • MD5

      afdd4593ddaebf00651dd13334e48343

    • SHA1

      3dd9b37f7c6c1176c4a9adb49e129b38296e1872

    • SHA256

      57147a7fd366deeb3b7a61e5fb21c1a34351ce6c2de9e6f523e734db783df431

    • SHA512

      b509b519cf7b43a1a940536eff75a5fdc47e2ef84c13d2297e36450d85388c9b10ff2c5c49074d411bd20a358f350b66ad308397377d28fd6daeada6697a34e1

    • SSDEEP

      6144:FqT+5a/xBsa0T98E1YNmdezRXrjr6JFs7yHIRFC//m4hLmUVagW8uDnK1LFKK5BJ:0sa22aezRXrjrNpRFsCJDQL7BJ

MITRE ATT&CK Enterprise v15

Tasks