General

  • Target

    6cbd35df492179538d1448e2c34e4422937b43e8bf32db9a471b809665dfef67

  • Size

    160KB

  • Sample

    191119-sfrgrmle4j

  • MD5

    3604355496f92bbb6c2931512b67e574

  • SHA1

    80945c642088b5d57a9582d0e4d710b5fcd99cd7

  • SHA256

    6cbd35df492179538d1448e2c34e4422937b43e8bf32db9a471b809665dfef67

  • SHA512

    ad9740ae5b5a9b5d7888a2eea200d9e6a4d6a5ec12e11dc77c5f6be909663f45793bce918d87c7ea9f4ce5c5ee18a863516745fe375072259f36d9a2e1922aa1

Malware Config

Extracted

Family

emotet

Botnet

Epoch1

C2

172.104.233.225:8080

70.32.78.99:8080

213.189.36.51:8080

107.170.27.84:443

87.106.77.40:7080

77.55.211.77:8080

201.190.133.235:8080

181.16.17.210:443

87.118.70.69:8080

45.79.95.107:443

111.119.233.65:80

138.68.106.4:7080

200.113.106.18:80

170.130.31.177:8080

91.83.93.124:7080

212.71.237.140:8080

76.69.29.42:80

50.28.51.143:8080

68.183.190.199:8080

190.146.131.105:8080

rsa_pubkey.plain

Targets

    • Target

      6cbd35df492179538d1448e2c34e4422937b43e8bf32db9a471b809665dfef67

    • Size

      160KB

    • MD5

      3604355496f92bbb6c2931512b67e574

    • SHA1

      80945c642088b5d57a9582d0e4d710b5fcd99cd7

    • SHA256

      6cbd35df492179538d1448e2c34e4422937b43e8bf32db9a471b809665dfef67

    • SHA512

      ad9740ae5b5a9b5d7888a2eea200d9e6a4d6a5ec12e11dc77c5f6be909663f45793bce918d87c7ea9f4ce5c5ee18a863516745fe375072259f36d9a2e1922aa1

MITRE ATT&CK Enterprise v6

Tasks