General

  • Target

    57c5f9ad230edffd90d10fa648f99819aab588cd67dfb68ba9dfec4045b4b5b8

  • Size

    185KB

  • Sample

    191108-zn9yys54ex

  • MD5

    6cdf6ef92a59050560a1d93105ad3197

  • SHA1

    5543555fa5cdd4bda8536487b7848400ebb786b5

  • SHA256

    57c5f9ad230edffd90d10fa648f99819aab588cd67dfb68ba9dfec4045b4b5b8

  • SHA512

    92ea715a24e370ccee82598d508450ecff47dbb50beb51dc6c7a1547ad43d23311c9217eaa468f61b8f5b0eed44437edcb68470d62f85918955d1319093cd195

Malware Config

Extracted

Family

emotet

Botnet

Epoch2

C2

74.208.125.192:443

165.227.156.155:443

104.239.175.211:8080

67.225.179.64:8080

46.105.131.87:80

45.33.49.124:443

183.102.238.69:465

190.51.63.1:80

87.106.139.101:8080

78.24.219.147:8080

86.22.221.170:80

94.205.247.10:80

31.12.67.62:7080

190.145.67.134:8090

87.230.19.21:8080

179.12.170.148:8080

5.196.74.210:8080

181.57.193.14:80

182.176.132.213:8090

173.249.47.77:8080

rsa_pubkey.plain

Targets

    • Target

      57c5f9ad230edffd90d10fa648f99819aab588cd67dfb68ba9dfec4045b4b5b8

    • Size

      185KB

    • MD5

      6cdf6ef92a59050560a1d93105ad3197

    • SHA1

      5543555fa5cdd4bda8536487b7848400ebb786b5

    • SHA256

      57c5f9ad230edffd90d10fa648f99819aab588cd67dfb68ba9dfec4045b4b5b8

    • SHA512

      92ea715a24e370ccee82598d508450ecff47dbb50beb51dc6c7a1547ad43d23311c9217eaa468f61b8f5b0eed44437edcb68470d62f85918955d1319093cd195

MITRE ATT&CK Enterprise v6

Tasks