General

  • Target

    d926bffb7d4d8e2cac599c5ad0acdd3ec04001481f26a507f7bd15287aa85f1b

  • Size

    368KB

  • Sample

    191216-8xx41bl79n

  • MD5

    9083a91c56a8b41f77876e6c2cd08c73

  • SHA1

    8b742899e0fd47986d49de07d67b4111be9eeff3

  • SHA256

    d926bffb7d4d8e2cac599c5ad0acdd3ec04001481f26a507f7bd15287aa85f1b

  • SHA512

    368c3608c0a609d2bcccc6f2036889cb9090272ff4a03252e4a7fe6c62d0f31a042e961b3d26cb8eb21953427de83d2bc7bd56b5864942a46d8c92037c9a30c9

Malware Config

Extracted

Family

emotet

Botnet

Epoch2

C2

66.209.97.122:8080

174.77.190.137:8080

104.137.176.186:80

165.227.156.155:443

167.99.105.223:7080

67.225.179.64:8080

176.31.200.130:8080

5.196.74.210:8080

82.155.161.203:80

101.187.247.29:80

120.150.246.241:80

73.11.153.178:8080

91.205.215.66:443

70.46.247.81:80

24.93.212.32:80

139.130.241.252:443

70.175.171.251:80

217.160.182.191:8080

104.236.246.93:8080

98.24.231.64:80

rsa_pubkey.plain

Targets

    • Target

      d926bffb7d4d8e2cac599c5ad0acdd3ec04001481f26a507f7bd15287aa85f1b

    • Size

      368KB

    • MD5

      9083a91c56a8b41f77876e6c2cd08c73

    • SHA1

      8b742899e0fd47986d49de07d67b4111be9eeff3

    • SHA256

      d926bffb7d4d8e2cac599c5ad0acdd3ec04001481f26a507f7bd15287aa85f1b

    • SHA512

      368c3608c0a609d2bcccc6f2036889cb9090272ff4a03252e4a7fe6c62d0f31a042e961b3d26cb8eb21953427de83d2bc7bd56b5864942a46d8c92037c9a30c9

MITRE ATT&CK Enterprise v6

Tasks