General

  • Target

    2025-02-15_c388599ec2b84cdca99bf545e31f75ce_icedid

  • Size

    576KB

  • Sample

    250215-y2dzjsspat

  • MD5

    c388599ec2b84cdca99bf545e31f75ce

  • SHA1

    17bbe27b88d3d554c5eaea1e69e903ef5b6895d2

  • SHA256

    6f8f3096e43e018ff0aa326cda9d4cde01669d0bea1475cc78189af6858efe8d

  • SHA512

    16bb673ba4c783e38abc6782672c50f0ac27819c6e522e9362037a4ec1980652ec14f6e98bfbcfaf3ff9b65147df4faea485be24387ea02011f77f8abb0376de

  • SSDEEP

    6144:EkfswLiSvVz0+oKvX+MjJe3/SgANnrBHmZT6rdm4D7veo6OYHFxo:d/OSvl0DKvX+aeONxpV6OC3

Malware Config

Extracted

Family

emotet

Botnet

Epoch2

C2

185.155.20.82:80

82.223.70.24:8080

58.171.38.26:80

103.86.49.11:8080

31.31.77.83:443

92.222.216.44:8080

186.208.123.210:443

136.243.205.112:7080

60.130.173.117:80

160.16.215.66:8080

98.15.140.226:80

162.241.92.219:8080

78.186.5.109:443

87.127.197.7:8080

168.235.67.138:7080

210.56.10.58:80

60.250.78.22:443

114.145.241.208:80

104.131.11.150:443

62.75.141.82:80

rsa_pubkey.plain

Targets

    • Target

      2025-02-15_c388599ec2b84cdca99bf545e31f75ce_icedid

    • Size

      576KB

    • MD5

      c388599ec2b84cdca99bf545e31f75ce

    • SHA1

      17bbe27b88d3d554c5eaea1e69e903ef5b6895d2

    • SHA256

      6f8f3096e43e018ff0aa326cda9d4cde01669d0bea1475cc78189af6858efe8d

    • SHA512

      16bb673ba4c783e38abc6782672c50f0ac27819c6e522e9362037a4ec1980652ec14f6e98bfbcfaf3ff9b65147df4faea485be24387ea02011f77f8abb0376de

    • SSDEEP

      6144:EkfswLiSvVz0+oKvX+MjJe3/SgANnrBHmZT6rdm4D7veo6OYHFxo:d/OSvl0DKvX+aeONxpV6OC3

    • Emotet

      Emotet is a trojan that is primarily spread through spam emails.

    • Emotet family

    • Downloads MZ/PE file

MITRE ATT&CK Enterprise v15

Tasks