General

  • Target

    310431d809486556d78d56dafa5010ed5491c413d20d01e63591ae93cb2617e2

  • Size

    258KB

  • Sample

    191106-91wkje4jc2

  • MD5

    5dc94b784a912ba3d8054ded09a74c59

  • SHA1

    45df2779ef8fdfda7e2b9bda7c538bae15c6744d

  • SHA256

    310431d809486556d78d56dafa5010ed5491c413d20d01e63591ae93cb2617e2

  • SHA512

    067dcc070956cabbd4c434857c27dc693d3b96a9da18fc953683fe1e3b748c85584a89f882d010b26b4974f11a0eaa8ed8af6c13e9a6704d618b745f16b4a58f

Malware Config

Extracted

Family

emotet

Botnet

Epoch1

C2

187.188.166.192:80

42.190.4.92:443

170.130.31.177:8080

51.255.165.160:8080

45.56.79.249:443

60.52.64.122:80

190.182.161.7:8080

86.42.166.147:80

91.83.93.124:7080

186.1.41.111:443

51.15.8.192:8080

104.131.58.132:8080

142.93.114.137:8080

201.213.32.59:80

163.172.40.218:7080

190.230.60.129:80

87.106.77.40:7080

190.230.60.129:8080

190.79.228.89:443

178.249.187.151:8080

rsa_pubkey.plain

Targets

    • Target

      310431d809486556d78d56dafa5010ed5491c413d20d01e63591ae93cb2617e2

    • Size

      258KB

    • MD5

      5dc94b784a912ba3d8054ded09a74c59

    • SHA1

      45df2779ef8fdfda7e2b9bda7c538bae15c6744d

    • SHA256

      310431d809486556d78d56dafa5010ed5491c413d20d01e63591ae93cb2617e2

    • SHA512

      067dcc070956cabbd4c434857c27dc693d3b96a9da18fc953683fe1e3b748c85584a89f882d010b26b4974f11a0eaa8ed8af6c13e9a6704d618b745f16b4a58f

MITRE ATT&CK Enterprise v6

Tasks