General

  • Target

    6e497e92d22f04e33619f92409c8dc35ba49b1f9e71dfb7285c28b4e34577afe

  • Size

    462KB

  • Sample

    211214-qr5eraggdp

  • MD5

    971dedf94375b801e4150c9ca9ccbb2a

  • SHA1

    dc66343cb12d4e2a06106b19a4d23b5b2e0e5f75

  • SHA256

    6e497e92d22f04e33619f92409c8dc35ba49b1f9e71dfb7285c28b4e34577afe

  • SHA512

    81f830eb3bf0e615aeaa19db1de3367202d1af25b41dacf712f1d0b71d5ee74d0d7c2f682ad0f8542017a285e0421da4a2b518636ef46e28248cefba08528dd9

Malware Config

Extracted

Family

emotet

Botnet

Epoch5

C2

209.239.112.82:8080

116.124.128.206:8080

45.63.5.129:443

128.199.192.135:8080

51.178.61.60:443

168.197.250.14:80

177.72.80.14:7080

51.210.242.234:8080

142.4.219.173:8080

78.47.204.80:443

78.46.73.125:443

37.44.244.177:8080

37.59.209.141:8080

104.131.62.48:8080

190.90.233.66:443

185.148.168.220:8080

185.148.168.15:8080

62.171.178.147:8080

191.252.103.16:80

54.38.242.185:443

eck1.plain
ecs1.plain

Targets

    • Target

      6e497e92d22f04e33619f92409c8dc35ba49b1f9e71dfb7285c28b4e34577afe

    • Size

      462KB

    • MD5

      971dedf94375b801e4150c9ca9ccbb2a

    • SHA1

      dc66343cb12d4e2a06106b19a4d23b5b2e0e5f75

    • SHA256

      6e497e92d22f04e33619f92409c8dc35ba49b1f9e71dfb7285c28b4e34577afe

    • SHA512

      81f830eb3bf0e615aeaa19db1de3367202d1af25b41dacf712f1d0b71d5ee74d0d7c2f682ad0f8542017a285e0421da4a2b518636ef46e28248cefba08528dd9

    • Emotet

      Emotet is a trojan that is primarily spread through spam emails.

MITRE ATT&CK Matrix

Tasks