General

  • Target

    2025-01-14_498a14ee902da853ac7983adf00d2816_icedid

  • Size

    216KB

  • Sample

    250114-267zzaspew

  • MD5

    498a14ee902da853ac7983adf00d2816

  • SHA1

    a5c7de3a36a82d091b1551e461b2656739bc4e69

  • SHA256

    d21d62319c6e070bd647911b9d90fc64b897bddbbfd782fa5c7f4a1df3a3168d

  • SHA512

    3edb1bd1952d006859b4aecfade19c9cbda4316d9dcfe14c3c2f02a652694141d713a88170d0903adf38b528af5f3b15276ab7c8ce2203536dadd20c467e093a

  • SSDEEP

    3072:98Hg+Cd8xpYPr0UjSFo0ShCvKMd2wEocjlVRcxTJTTNsMC8jiWHuuthlvNr:2ZCd0YPoQ3DCT6cL3GAjjOu3r

Malware Config

Extracted

Family

emotet

Botnet

Epoch1

C2

37.221.70.250:80

181.120.72.110:80

94.23.62.116:8080

98.103.204.12:443

59.148.253.194:8080

190.92.122.226:80

219.92.13.25:80

68.183.190.199:8080

5.89.33.136:80

213.197.182.158:8080

186.188.212.201:80

185.183.16.47:80

193.251.77.110:80

168.197.45.36:80

46.43.2.95:8080

192.232.229.54:7080

169.1.39.242:80

201.71.228.86:80

181.61.182.143:80

178.211.45.66:8080

rsa_pubkey.plain

Targets

    • Target

      2025-01-14_498a14ee902da853ac7983adf00d2816_icedid

    • Size

      216KB

    • MD5

      498a14ee902da853ac7983adf00d2816

    • SHA1

      a5c7de3a36a82d091b1551e461b2656739bc4e69

    • SHA256

      d21d62319c6e070bd647911b9d90fc64b897bddbbfd782fa5c7f4a1df3a3168d

    • SHA512

      3edb1bd1952d006859b4aecfade19c9cbda4316d9dcfe14c3c2f02a652694141d713a88170d0903adf38b528af5f3b15276ab7c8ce2203536dadd20c467e093a

    • SSDEEP

      3072:98Hg+Cd8xpYPr0UjSFo0ShCvKMd2wEocjlVRcxTJTTNsMC8jiWHuuthlvNr:2ZCd0YPoQ3DCT6cL3GAjjOu3r

MITRE ATT&CK Enterprise v15

Tasks