General

  • Target

    2024-06-29_c920c740d3031ea8916bf0161321eab0_icedid

  • Size

    367KB

  • Sample

    240629-y6cbhsyemk

  • MD5

    c920c740d3031ea8916bf0161321eab0

  • SHA1

    2ee470647ebe5f02769e3bb91f81d2d4e6bf36a1

  • SHA256

    4486df42daa7ab38f95aea8cfcb28f11ab5fc2706771f5477133b16eb84dac6a

  • SHA512

    65ce3deb25240ceb340fcf2d2fac7663d9415241958e3273c30306d6d6b2d2767bbffb8700f97c697dd484137738b7f8893508903e535ef4072a218b1bdcd33c

  • SSDEEP

    6144:Psu+CmpsozV6ydTHpITptLaOkACUkoHl6QeKkCi/wA82VAyF+HYG:kucV62HpI4zUke6Wk9gKAyF+HYG

Malware Config

Extracted

Family

emotet

Botnet

Epoch1

C2

201.213.100.141:443

189.160.234.67:80

103.31.232.93:443

91.236.4.234:443

164.77.130.222:80

200.69.224.73:80

187.162.250.23:80

152.170.222.65:80

104.131.103.37:8080

186.68.48.204:443

70.32.84.74:8080

177.66.190.130:80

181.61.224.26:80

190.47.227.130:443

178.79.163.131:8080

120.150.76.215:80

185.94.252.12:80

2.47.112.152:80

5.196.35.138:7080

47.150.248.161:80

rsa_pubkey.plain

Targets

    • Target

      2024-06-29_c920c740d3031ea8916bf0161321eab0_icedid

    • Size

      367KB

    • MD5

      c920c740d3031ea8916bf0161321eab0

    • SHA1

      2ee470647ebe5f02769e3bb91f81d2d4e6bf36a1

    • SHA256

      4486df42daa7ab38f95aea8cfcb28f11ab5fc2706771f5477133b16eb84dac6a

    • SHA512

      65ce3deb25240ceb340fcf2d2fac7663d9415241958e3273c30306d6d6b2d2767bbffb8700f97c697dd484137738b7f8893508903e535ef4072a218b1bdcd33c

    • SSDEEP

      6144:Psu+CmpsozV6ydTHpITptLaOkACUkoHl6QeKkCi/wA82VAyF+HYG:kucV62HpI4zUke6Wk9gKAyF+HYG

    • Emotet

      Emotet is a trojan that is primarily spread through spam emails.

MITRE ATT&CK Matrix ATT&CK v13

Tasks