General

  • Target

    ee1dc707cbcbc487b06e4fecd93fcfaffd4ef74aa8894277c2d27116e2f99816

  • Size

    749KB

  • Sample

    211207-p5t1hacbe4

  • MD5

    212b40384c48e863826bc6ae6ca88230

  • SHA1

    bbcdef48675c924579dae940e7904a95d6dae843

  • SHA256

    ee1dc707cbcbc487b06e4fecd93fcfaffd4ef74aa8894277c2d27116e2f99816

  • SHA512

    b768e5119f1394d3ed6699e6ca295e7f53f62a255c591dff9ed2a26a674e9bf7425c937bc1b4a56a282335662f5443ba0cbdd180efed8861701a131c8420bc7f

Malware Config

Extracted

Family

emotet

Botnet

Epoch5

C2

209.239.112.82:8080

116.124.128.206:8080

45.63.5.129:443

128.199.192.135:8080

51.178.61.60:443

168.197.250.14:80

177.72.80.14:7080

51.210.242.234:8080

142.4.219.173:8080

78.47.204.80:443

78.46.73.125:443

37.44.244.177:8080

37.59.209.141:8080

104.131.62.48:8080

190.90.233.66:443

185.148.168.220:8080

185.148.168.15:8080

62.171.178.147:8080

191.252.103.16:80

54.38.242.185:443

eck1.plain
ecs1.plain

Targets

    • Target

      ee1dc707cbcbc487b06e4fecd93fcfaffd4ef74aa8894277c2d27116e2f99816

    • Size

      749KB

    • MD5

      212b40384c48e863826bc6ae6ca88230

    • SHA1

      bbcdef48675c924579dae940e7904a95d6dae843

    • SHA256

      ee1dc707cbcbc487b06e4fecd93fcfaffd4ef74aa8894277c2d27116e2f99816

    • SHA512

      b768e5119f1394d3ed6699e6ca295e7f53f62a255c591dff9ed2a26a674e9bf7425c937bc1b4a56a282335662f5443ba0cbdd180efed8861701a131c8420bc7f

    • Emotet

      Emotet is a trojan that is primarily spread through spam emails.

MITRE ATT&CK Matrix

Tasks