General

  • Target

    e30fb527116a3b5c573ec4efbe2e5badae414b3fda6650b15538376dd461c8e6

  • Size

    160KB

  • Sample

    191115-16j6rcp43j

  • MD5

    4edf7b26654e201e1b8f1dd49700104f

  • SHA1

    2b144e36c3e6237fd2928d4960bc8382e9b01f1e

  • SHA256

    e30fb527116a3b5c573ec4efbe2e5badae414b3fda6650b15538376dd461c8e6

  • SHA512

    2165c7bdfe4642672a35f796542dbca5100fd812c6c5d6bd440798021682bfcd8dd56d6a926d9fc1ed43cdffe022a52bfec5591b702896928e0d4a0c718fb495

Malware Config

Extracted

Family

emotet

Botnet

Epoch2

C2

65.23.154.17:8080

144.76.56.36:8080

78.47.106.72:8080

178.79.161.166:443

192.241.220.155:8080

37.157.194.134:443

165.227.156.155:443

178.210.51.222:8080

5.196.74.210:8080

186.4.172.5:8080

45.33.49.124:443

91.205.215.66:8080

78.24.219.147:8080

46.105.131.87:80

149.202.153.252:8080

85.104.59.244:20

186.4.172.5:443

103.39.131.88:80

83.136.245.190:8080

169.239.182.217:8080

rsa_pubkey.plain

Targets

    • Target

      e30fb527116a3b5c573ec4efbe2e5badae414b3fda6650b15538376dd461c8e6

    • Size

      160KB

    • MD5

      4edf7b26654e201e1b8f1dd49700104f

    • SHA1

      2b144e36c3e6237fd2928d4960bc8382e9b01f1e

    • SHA256

      e30fb527116a3b5c573ec4efbe2e5badae414b3fda6650b15538376dd461c8e6

    • SHA512

      2165c7bdfe4642672a35f796542dbca5100fd812c6c5d6bd440798021682bfcd8dd56d6a926d9fc1ed43cdffe022a52bfec5591b702896928e0d4a0c718fb495

MITRE ATT&CK Enterprise v6

Tasks