General

  • Target

    71dddec0d4422a47bf705edddf4c7d7cc53437548113e848ed7ca9ffc52c0db9

  • Size

    152KB

  • Sample

    191115-ws6dryld2s

  • MD5

    68f0a6099c7a0c2114dec5fbece0a7c7

  • SHA1

    96f3b8d131fbb5416664fb9558c27fbe5906f339

  • SHA256

    71dddec0d4422a47bf705edddf4c7d7cc53437548113e848ed7ca9ffc52c0db9

  • SHA512

    376f719977797fad077505a754376bf28755e72ade57b24d59184f54f8f0be440c240d0106cf81306a66779d13a6fe5a19ce583042e9101979697b80e0357e18

Malware Config

Extracted

Family

emotet

Botnet

Epoch3

C2

195.201.56.70:80

91.205.173.54:8080

163.172.97.112:8080

138.197.140.163:8080

83.169.33.157:8080

119.159.150.176:443

95.216.207.86:7080

154.120.227.206:8080

200.55.168.82:20

190.128.222.14:80

193.34.144.138:8080

195.201.56.68:7080

78.46.87.133:8080

172.104.70.207:8080

46.17.6.116:8080

216.75.37.196:8080

157.7.164.178:8081

187.177.155.123:990

139.162.185.116:443

191.100.24.201:50000

rsa_pubkey.plain

Targets

    • Target

      71dddec0d4422a47bf705edddf4c7d7cc53437548113e848ed7ca9ffc52c0db9

    • Size

      152KB

    • MD5

      68f0a6099c7a0c2114dec5fbece0a7c7

    • SHA1

      96f3b8d131fbb5416664fb9558c27fbe5906f339

    • SHA256

      71dddec0d4422a47bf705edddf4c7d7cc53437548113e848ed7ca9ffc52c0db9

    • SHA512

      376f719977797fad077505a754376bf28755e72ade57b24d59184f54f8f0be440c240d0106cf81306a66779d13a6fe5a19ce583042e9101979697b80e0357e18

MITRE ATT&CK Enterprise v6

Tasks