General

  • Target

    9403c70997e9cf600fa44ae2ec0717836e50fcc98ea84c937eaacc0d81bca452

  • Size

    217KB

  • Sample

    191123-qw4bdphe72

  • MD5

    d28fe0a2049d9405571f11da40f70eb6

  • SHA1

    15ea5da85dae0a6b3f3a572bd341e8026be0e8db

  • SHA256

    9403c70997e9cf600fa44ae2ec0717836e50fcc98ea84c937eaacc0d81bca452

  • SHA512

    6bf9851cee4f43b39435a03811b61290d2356209fc62b5964a4992ab76cdf4db83fa405a40ecd178736520587ce7bc3979f403f5cb2d220859150083833e4e0c

Malware Config

Extracted

Family

emotet

Botnet

Epoch2

C2

50.116.86.205:8080

209.97.168.52:8080

37.187.2.199:443

149.202.197.94:8080

104.239.175.211:8080

104.131.11.150:8080

144.139.247.220:80

59.103.164.174:80

182.176.132.213:8090

87.230.19.21:8080

149.202.153.252:8080

103.39.131.88:80

107.170.24.125:8080

192.241.255.77:8080

190.145.67.134:8090

186.75.241.230:80

192.241.220.155:8080

178.210.51.222:8080

37.157.194.134:443

31.12.67.62:7080

rsa_pubkey.plain

Targets

    • Target

      9403c70997e9cf600fa44ae2ec0717836e50fcc98ea84c937eaacc0d81bca452

    • Size

      217KB

    • MD5

      d28fe0a2049d9405571f11da40f70eb6

    • SHA1

      15ea5da85dae0a6b3f3a572bd341e8026be0e8db

    • SHA256

      9403c70997e9cf600fa44ae2ec0717836e50fcc98ea84c937eaacc0d81bca452

    • SHA512

      6bf9851cee4f43b39435a03811b61290d2356209fc62b5964a4992ab76cdf4db83fa405a40ecd178736520587ce7bc3979f403f5cb2d220859150083833e4e0c

MITRE ATT&CK Enterprise v6

Tasks