General

  • Target

    2025-02-28_8504615e9124e3800e68a71010c8e36a_icedid

  • Size

    272KB

  • Sample

    250228-xtsx3avrv2

  • MD5

    8504615e9124e3800e68a71010c8e36a

  • SHA1

    0f022eb7487adf42ed9b7d84f0b593b54d273520

  • SHA256

    c0ff535f5f1cd9a60a6c73729096bad6c8051edc21826351e02e7d701071cc52

  • SHA512

    60bb8de793bd581e2ede59fd255276ce58346f506c0486e2d91ade91a3f70b327f50f25a76bfe9069b4e711a37d3684f6f449de4060b31ef85bfdacda1dd150c

  • SSDEEP

    6144:fDC5yQfvp9e4YbTaPnEu/+6i5j0RgyJWIaMDILS8:LCBfvLoaPDHiCJgMDILS

Malware Config

Extracted

Family

emotet

Botnet

Epoch2

C2

140.186.212.146:80

85.214.28.226:8080

142.44.137.67:443

162.241.242.173:8080

24.43.99.75:80

120.150.60.189:80

189.212.199.126:443

98.109.204.230:80

174.45.13.118:80

95.213.236.64:8080

203.153.216.189:7080

188.219.31.12:80

168.235.67.138:7080

152.168.248.128:443

173.62.217.22:443

176.111.60.55:8080

201.173.217.124:443

112.185.64.233:80

190.160.53.126:80

37.139.21.175:8080

rsa_pubkey.plain
1
-----BEGIN PUBLIC KEY-----
2
MHwwDQYJKoZIhvcNAQEBBQADawAwaAJhANQOcBKvh5xEW7VcJ9totsjdBwuAclxS
3
Q0e09fk8V053lktpW3TRrzAW63yt6j1KWnyxMrU3igFXypBoI4lVNmkje4UPtIIS
4
fkzjEIvG1v/ZNn1k0J0PfFTxbFFeUEs3AwIDAQAB
5
-----END PUBLIC KEY-----

Targets

    • Target

      2025-02-28_8504615e9124e3800e68a71010c8e36a_icedid

    • Size

      272KB

    • MD5

      8504615e9124e3800e68a71010c8e36a

    • SHA1

      0f022eb7487adf42ed9b7d84f0b593b54d273520

    • SHA256

      c0ff535f5f1cd9a60a6c73729096bad6c8051edc21826351e02e7d701071cc52

    • SHA512

      60bb8de793bd581e2ede59fd255276ce58346f506c0486e2d91ade91a3f70b327f50f25a76bfe9069b4e711a37d3684f6f449de4060b31ef85bfdacda1dd150c

    • SSDEEP

      6144:fDC5yQfvp9e4YbTaPnEu/+6i5j0RgyJWIaMDILS8:LCBfvLoaPDHiCJgMDILS

MITRE ATT&CK Enterprise v15

Tasks

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.