General

  • Target

    292700c0de8798ffcba200b03baa40ae6a505de2056f59227f1c98e8ab225f97

  • Size

    372KB

  • Sample

    191115-94bwgrcmf6

  • MD5

    2615aeba118d8a8a631cfc03ff192903

  • SHA1

    6e2108f87f6fb1d5d954f0ab02bbcc6430ecd3c5

  • SHA256

    292700c0de8798ffcba200b03baa40ae6a505de2056f59227f1c98e8ab225f97

  • SHA512

    26df01c0e376bf4e5a66bd911d4fa1dfae21d73a13519749f96c0e4877203c3fadc32809413201f3dfe873e7bdb5fae9c3da638f1611c932c00163e89e018779

Malware Config

Extracted

Family

emotet

Botnet

Epoch2

C2

144.76.56.36:8080

78.47.106.72:8080

165.227.156.155:443

192.241.255.77:8080

83.136.245.190:8080

91.205.215.66:8080

190.226.44.20:21

186.75.241.230:80

217.160.182.191:8080

190.145.67.134:8090

86.22.221.170:80

149.202.153.252:8080

80.11.163.139:21

181.31.213.158:8080

183.102.238.69:465

186.4.172.5:8080

104.131.44.150:8080

211.63.71.72:8080

31.172.240.91:8080

115.78.95.230:443

rsa_pubkey.plain

Targets

    • Target

      292700c0de8798ffcba200b03baa40ae6a505de2056f59227f1c98e8ab225f97

    • Size

      372KB

    • MD5

      2615aeba118d8a8a631cfc03ff192903

    • SHA1

      6e2108f87f6fb1d5d954f0ab02bbcc6430ecd3c5

    • SHA256

      292700c0de8798ffcba200b03baa40ae6a505de2056f59227f1c98e8ab225f97

    • SHA512

      26df01c0e376bf4e5a66bd911d4fa1dfae21d73a13519749f96c0e4877203c3fadc32809413201f3dfe873e7bdb5fae9c3da638f1611c932c00163e89e018779

MITRE ATT&CK Enterprise v6

Tasks