General

  • Target

    cffd1e48b0f5bae08eb15ae2914de0a79246ee2d32b23e7ebe627627c5d4457c

  • Size

    388KB

  • Sample

    191127-r4fmp3er1e

  • MD5

    1f630374b75c0cff3a5a03d7055f9c69

  • SHA1

    273870e636f7195843504a7562b8aa96a5ed3339

  • SHA256

    cffd1e48b0f5bae08eb15ae2914de0a79246ee2d32b23e7ebe627627c5d4457c

  • SHA512

    842d5538304e347d5a3fd7663b4fc3ed656f9bf113bc953df6eb99d3d4cea0e965707d46bef85d07fefc3eac0a8348cefc776deddd395b38e712045d19dee383

Malware Config

Extracted

Family

emotet

Botnet

Epoch1

C2

104.236.137.72:8080

172.104.233.225:8080

213.189.36.51:8080

85.234.143.94:8080

119.59.124.163:8080

190.146.131.105:8080

186.23.132.93:990

200.113.106.18:80

163.172.40.218:7080

187.190.49.92:443

201.190.133.235:8080

46.28.111.142:7080

104.131.58.132:8080

14.160.93.230:80

201.163.74.202:443

200.124.225.32:80

203.130.0.69:80

181.36.42.205:443

182.48.194.6:8090

87.106.77.40:7080

rsa_pubkey.plain

Targets

    • Target

      cffd1e48b0f5bae08eb15ae2914de0a79246ee2d32b23e7ebe627627c5d4457c

    • Size

      388KB

    • MD5

      1f630374b75c0cff3a5a03d7055f9c69

    • SHA1

      273870e636f7195843504a7562b8aa96a5ed3339

    • SHA256

      cffd1e48b0f5bae08eb15ae2914de0a79246ee2d32b23e7ebe627627c5d4457c

    • SHA512

      842d5538304e347d5a3fd7663b4fc3ed656f9bf113bc953df6eb99d3d4cea0e965707d46bef85d07fefc3eac0a8348cefc776deddd395b38e712045d19dee383

MITRE ATT&CK Enterprise v6

Tasks