Resubmissions

09-12-2021 17:56

211209-whze2aeedl 10

07-12-2021 15:17

211207-sn2wkadfb5 3

General

  • Target

    412cfacac6a032dea81fd6e3543b0c409cebe6dd6902dca412b0128b8a54e195

  • Size

    215KB

  • Sample

    211209-whze2aeedl

  • MD5

    7b1362870f12d494aae22c5e0946f0c8

  • SHA1

    6cbda7514163ea5ca6164bc3ee138e38946df1c2

  • SHA256

    412cfacac6a032dea81fd6e3543b0c409cebe6dd6902dca412b0128b8a54e195

  • SHA512

    ebfaf702d6402ef7536c9f9b4b1c4bc8c06eaffccb662533fe74524f5487becfa0cd21786c31d16616507644469b5723d89773d2cebdda76e1d931da2f5d5917

Malware Config

Extracted

Family

emotet

Botnet

Epoch4

C2

172.104.227.98:443

31.207.89.74:8080

46.55.222.11:443

41.76.108.46:8080

103.8.26.103:8080

185.184.25.237:8080

103.8.26.102:8080

203.114.109.124:443

45.118.115.99:8080

178.79.147.66:8080

58.227.42.236:80

45.118.135.203:7080

103.75.201.2:443

195.154.133.20:443

192.254.71.210:443

45.142.114.231:8080

212.237.5.209:443

207.38.84.195:8080

104.251.214.46:8080

212.237.17.99:8080

eck1.plain
ecs1.plain

Targets

    • Target

      412cfacac6a032dea81fd6e3543b0c409cebe6dd6902dca412b0128b8a54e195

    • Size

      215KB

    • MD5

      7b1362870f12d494aae22c5e0946f0c8

    • SHA1

      6cbda7514163ea5ca6164bc3ee138e38946df1c2

    • SHA256

      412cfacac6a032dea81fd6e3543b0c409cebe6dd6902dca412b0128b8a54e195

    • SHA512

      ebfaf702d6402ef7536c9f9b4b1c4bc8c06eaffccb662533fe74524f5487becfa0cd21786c31d16616507644469b5723d89773d2cebdda76e1d931da2f5d5917

    • Emotet

      Emotet is a trojan that is primarily spread through spam emails.

MITRE ATT&CK Matrix

Tasks