General

  • Target

    d64f2df86f130c36b67f815c41c223ce1299f511fc5f9bf2c6fa382cbe0a7777

  • Size

    321KB

  • Sample

    191107-5tqpza7chn

  • MD5

    07b4b4901bf99bc6f1519c542ad86ac6

  • SHA1

    ebc84760e8dca903152a01ca10e9d71619e2bb7e

  • SHA256

    d64f2df86f130c36b67f815c41c223ce1299f511fc5f9bf2c6fa382cbe0a7777

  • SHA512

    9278a0b4f6fa4ef5e0f89d09fcdf03293b87f153674a8c78e74e415b08835297714c6149a0943a913def8a95545268a8e1640085e3e59c706bddd6ef0090716d

Malware Config

Extracted

Family

emotet

Botnet

Epoch1

C2

187.188.166.192:80

42.190.4.92:443

170.130.31.177:8080

51.255.165.160:8080

45.56.79.249:443

60.52.64.122:80

190.182.161.7:8080

86.42.166.147:80

91.83.93.124:7080

186.1.41.111:443

51.15.8.192:8080

104.131.58.132:8080

142.93.114.137:8080

201.213.32.59:80

163.172.40.218:7080

190.230.60.129:80

87.106.77.40:7080

190.230.60.129:8080

190.79.228.89:443

178.249.187.151:8080

rsa_pubkey.plain

Targets

    • Target

      d64f2df86f130c36b67f815c41c223ce1299f511fc5f9bf2c6fa382cbe0a7777

    • Size

      321KB

    • MD5

      07b4b4901bf99bc6f1519c542ad86ac6

    • SHA1

      ebc84760e8dca903152a01ca10e9d71619e2bb7e

    • SHA256

      d64f2df86f130c36b67f815c41c223ce1299f511fc5f9bf2c6fa382cbe0a7777

    • SHA512

      9278a0b4f6fa4ef5e0f89d09fcdf03293b87f153674a8c78e74e415b08835297714c6149a0943a913def8a95545268a8e1640085e3e59c706bddd6ef0090716d

MITRE ATT&CK Enterprise v6

Tasks