General

  • Target

    a12515213a2c022e726b544d655bbd435b2063198c3de5c0a0335f14981bc10e

  • Size

    119KB

  • Sample

    191112-q679f2ss1e

  • MD5

    a1a29f690b36f42bc8618d2afdaa629d

  • SHA1

    8902d7843d1cac27b77d2446f4be54d683e6ec6b

  • SHA256

    a12515213a2c022e726b544d655bbd435b2063198c3de5c0a0335f14981bc10e

  • SHA512

    5f77af2226328b6c05352e72a7edf88c15614517184a25e15052025982451cdfcaa230ee159c2c9992e9456c6e53ad8c1e8d599deb4bffee8dede92dfa3dda7a

Malware Config

Extracted

Family

emotet

Botnet

Epoch3

C2

181.197.108.171:443

191.100.24.201:50000

211.110.229.161:443

193.34.144.138:8080

74.208.173.91:8080

46.105.131.68:8080

152.169.32.143:8080

189.252.102.40:8080

154.120.227.206:8080

178.249.187.150:7080

103.205.177.229:80

157.7.164.178:8081

138.197.140.163:8080

95.216.212.157:8080

216.75.37.196:8080

216.70.88.55:8080

189.218.243.150:443

124.150.175.129:8080

198.57.217.170:8080

212.112.113.235:80

rsa_pubkey.plain

Targets

    • Target

      a12515213a2c022e726b544d655bbd435b2063198c3de5c0a0335f14981bc10e

    • Size

      119KB

    • MD5

      a1a29f690b36f42bc8618d2afdaa629d

    • SHA1

      8902d7843d1cac27b77d2446f4be54d683e6ec6b

    • SHA256

      a12515213a2c022e726b544d655bbd435b2063198c3de5c0a0335f14981bc10e

    • SHA512

      5f77af2226328b6c05352e72a7edf88c15614517184a25e15052025982451cdfcaa230ee159c2c9992e9456c6e53ad8c1e8d599deb4bffee8dede92dfa3dda7a

MITRE ATT&CK Enterprise v6

Tasks