Overview

overview

10

Static

static

3

2025-03-06...id.exe

windows7-x64

2025-03-06...id.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2025-03-06_0ac6a9641052e63b641b29779a6d2ec4_icedid

  • Size

    240KB

  • Sample

    250306-b7l6savtdy

  • MD5

    0ac6a9641052e63b641b29779a6d2ec4

  • SHA1

    d0aa53eecf5b88032d40a20fd76f864f01c5449d

  • SHA256

    4ffd2bd1c4b9cd869b9a06aeb2d61685f8a1efe46fd433337b9e296c6f535422

  • SHA512

    028e1ec26663c01c2136d029b2333f8bceff6b28b0220ba179aa758fb90f033aead5778373ecb57026e6f289ef51bbea6d3b2d67ab7cb73d8044bfc171229561

  • SSDEEP

    3072:9+6wWS5VeDfq/lm8gblsWFGAIV9x0eDw1Y7M7lYlJhpYhXwT06c/7D9De9yZ:9FmV6om7HF7I5o1Y7psu0b/74

Score
10/10
emotetepoch1bankerdiscoverytrojan

Malware Config

Extracted

Family

emotet

Botnet

Epoch1

C2

71.50.31.38:80

185.94.252.13:443

217.199.160.224:7080

181.167.96.215:80

111.67.12.221:8080

68.183.170.114:8080

212.71.237.140:8080

83.169.21.32:7080

190.6.193.152:8080

217.13.106.14:8080

181.31.211.181:80

177.66.190.130:80

192.241.146.84:8080

80.249.176.206:80

204.225.249.100:7080

137.74.106.111:7080

5.196.35.138:7080

104.131.103.37:8080

189.218.165.63:80

170.81.48.2:80
rsa_pubkey.plain

Targets

    • Target

      2025-03-06_0ac6a9641052e63b641b29779a6d2ec4_icedid

    • Size

      240KB

    • MD5

      0ac6a9641052e63b641b29779a6d2ec4

    • SHA1

      d0aa53eecf5b88032d40a20fd76f864f01c5449d

    • SHA256

      4ffd2bd1c4b9cd869b9a06aeb2d61685f8a1efe46fd433337b9e296c6f535422

    • SHA512

      028e1ec26663c01c2136d029b2333f8bceff6b28b0220ba179aa758fb90f033aead5778373ecb57026e6f289ef51bbea6d3b2d67ab7cb73d8044bfc171229561

    • SSDEEP

      3072:9+6wWS5VeDfq/lm8gblsWFGAIV9x0eDw1Y7M7lYlJhpYhXwT06c/7D9De9yZ:9FmV6om7HF7I5o1Y7psu0b/74

    Score
    10/10
    emotetepoch1bankerdiscoverytrojan
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks