General

  • Target

    3062d6268485468083a97411cc30c8ce0c292dd1d6f73649383167d36f93c56e

  • Size

    212KB

  • Sample

    191129-tba2ymyvhn

  • MD5

    9a80a04a173c2f2eea1eca330a3de642

  • SHA1

    95b2587f98a9dc5042ca16df1a6fd09782bd4ab7

  • SHA256

    3062d6268485468083a97411cc30c8ce0c292dd1d6f73649383167d36f93c56e

  • SHA512

    d5b2ef4653312af6c970191c66686ed002b10e3011cff9150babd91ab391b01306f49fa7aec688af18632fb6d63c85e02e4042666bcbf7282f823157f098740e

Malware Config

Extracted

Family

emotet

Botnet

Epoch2

C2

12.229.155.122:80

5.88.182.250:80

128.65.154.183:443

59.110.18.236:443

45.56.88.91:443

51.68.220.244:8080

206.81.10.215:8080

211.63.71.72:8080

171.101.153.86:990

95.128.43.213:8080

31.172.240.91:8080

167.99.105.223:7080

24.45.193.161:7080

104.131.11.150:8080

167.71.10.37:8080

104.131.44.150:8080

190.108.228.48:990

195.244.215.206:80

192.241.220.155:8080

209.97.168.52:8080

rsa_pubkey.plain

Targets

    • Target

      3062d6268485468083a97411cc30c8ce0c292dd1d6f73649383167d36f93c56e

    • Size

      212KB

    • MD5

      9a80a04a173c2f2eea1eca330a3de642

    • SHA1

      95b2587f98a9dc5042ca16df1a6fd09782bd4ab7

    • SHA256

      3062d6268485468083a97411cc30c8ce0c292dd1d6f73649383167d36f93c56e

    • SHA512

      d5b2ef4653312af6c970191c66686ed002b10e3011cff9150babd91ab391b01306f49fa7aec688af18632fb6d63c85e02e4042666bcbf7282f823157f098740e

MITRE ATT&CK Enterprise v6

Tasks