General

  • Target

    2025-01-14_544feca0515d819bc19521d3361678c4_icedid

  • Size

    784KB

  • Sample

    250114-ct2vrawngm

  • MD5

    544feca0515d819bc19521d3361678c4

  • SHA1

    b54d059d4ecac9d6a8e1535b7ad7a62ea292d310

  • SHA256

    aade0eae2708f2874909f2b7c63345b383d9d3273a668166aa5b5105351c6745

  • SHA512

    9b19241e56e3f1a7b8c8f0cec00b40ea50367ae56988a2e52b948e5ece8e3a8831082c4496880356715e4309ed6ba629f19cf30818ca5ec78cd37db64c678b87

  • SSDEEP

    12288:sOps+brP/VgjVbK2rOhkfq8eKYmC3LC2wv5op3xNwnYYdV9PQ/DWwBaHswwpUxug:zs+vPN0buywLC2wvHZdV1MfT8n

Malware Config

Extracted

Family

emotet

Botnet

Epoch2

C2

88.153.35.32:80

107.170.146.252:8080

173.212.214.235:7080

167.114.153.111:8080

67.170.250.203:443

121.124.124.40:7080

103.86.49.11:8080

74.214.230.200:80

194.187.133.160:443

172.104.97.173:8080

172.91.208.86:80

200.116.145.225:443

202.134.4.216:8080

172.105.13.66:443

190.164.104.62:80

50.35.17.13:80

176.111.60.55:8080

201.241.127.190:80

66.76.12.94:8080

95.213.236.64:8080

rsa_pubkey.plain

Targets

    • Target

      2025-01-14_544feca0515d819bc19521d3361678c4_icedid

    • Size

      784KB

    • MD5

      544feca0515d819bc19521d3361678c4

    • SHA1

      b54d059d4ecac9d6a8e1535b7ad7a62ea292d310

    • SHA256

      aade0eae2708f2874909f2b7c63345b383d9d3273a668166aa5b5105351c6745

    • SHA512

      9b19241e56e3f1a7b8c8f0cec00b40ea50367ae56988a2e52b948e5ece8e3a8831082c4496880356715e4309ed6ba629f19cf30818ca5ec78cd37db64c678b87

    • SSDEEP

      12288:sOps+brP/VgjVbK2rOhkfq8eKYmC3LC2wv5op3xNwnYYdV9PQ/DWwBaHswwpUxug:zs+vPN0buywLC2wvHZdV1MfT8n

MITRE ATT&CK Enterprise v15

Tasks