General

  • Target

    1296d8774c5c1fdfd849570b8ed42dca035348e1d3f59a846c80f2c49a80db49

  • Size

    412KB

  • Sample

    191114-7ywlhp733s

  • MD5

    e4eeb0396c552305776a1ae522627b1a

  • SHA1

    b9efcf60a8bcd763dd75c0c4716acc50ee31479a

  • SHA256

    1296d8774c5c1fdfd849570b8ed42dca035348e1d3f59a846c80f2c49a80db49

  • SHA512

    88e5677d55b555f00a0d42fd0d07e7a6fcb3af59e10b337d74feb19d23d674cbf7e3deac5be4a2590b65af7ecfc297aeb1260f68b28eff40c28e0401a31074e1

Malware Config

Extracted

Family

emotet

Botnet

Epoch3

C2

105.226.188.128:8090

91.205.173.54:8080

163.172.97.112:8080

72.47.202.235:8080

46.17.6.116:8080

46.105.131.68:8080

37.59.24.25:8080

152.169.32.143:8080

178.249.187.150:7080

23.253.207.142:8080

201.196.15.79:990

187.177.155.123:990

189.154.130.167:443

176.58.93.123:80

191.100.24.201:50000

192.163.221.191:8080

190.128.222.14:80

51.38.134.203:8080

157.7.164.178:8081

95.216.212.157:8080

rsa_pubkey.plain

Targets

    • Target

      1296d8774c5c1fdfd849570b8ed42dca035348e1d3f59a846c80f2c49a80db49

    • Size

      412KB

    • MD5

      e4eeb0396c552305776a1ae522627b1a

    • SHA1

      b9efcf60a8bcd763dd75c0c4716acc50ee31479a

    • SHA256

      1296d8774c5c1fdfd849570b8ed42dca035348e1d3f59a846c80f2c49a80db49

    • SHA512

      88e5677d55b555f00a0d42fd0d07e7a6fcb3af59e10b337d74feb19d23d674cbf7e3deac5be4a2590b65af7ecfc297aeb1260f68b28eff40c28e0401a31074e1

MITRE ATT&CK Enterprise v6

Tasks