General

  • Target

    b4cf95ff045fad20437dcad937ee24166ac29bd2680060ae0bd984b5bdf8d047

  • Size

    408KB

  • Sample

    220119-qdc4caaacr

  • MD5

    48f77edd94f929c9c8d56a52f72d7a9f

  • SHA1

    ed72b6d67c723bbeadc338aac2e6a7ae6573851f

  • SHA256

    b4cf95ff045fad20437dcad937ee24166ac29bd2680060ae0bd984b5bdf8d047

  • SHA512

    615486be46074b5feb4d1f41d76381dc9ddb5ed54c8b12096cf2c2a49513cdde6334bfdce0ce042876e31ef95a85c21f947c859873983d56b39dcf1fe6208b7a

Malware Config

Extracted

Family

emotet

Botnet

Epoch4

C2

131.100.24.231:80

209.59.138.75:7080

103.8.26.103:8080

51.38.71.0:443

212.237.17.99:8080

79.172.212.216:8080

207.38.84.195:8080

104.168.155.129:8080

178.79.147.66:8080

46.55.222.11:443

103.8.26.102:8080

192.254.71.210:443

45.176.232.124:443

203.114.109.124:443

51.68.175.8:8080

58.227.42.236:80

45.142.114.231:8080

217.182.143.207:443

178.63.25.185:443

45.118.115.99:8080

eck1.plain
ecs1.plain

Targets

    • Target

      b4cf95ff045fad20437dcad937ee24166ac29bd2680060ae0bd984b5bdf8d047

    • Size

      408KB

    • MD5

      48f77edd94f929c9c8d56a52f72d7a9f

    • SHA1

      ed72b6d67c723bbeadc338aac2e6a7ae6573851f

    • SHA256

      b4cf95ff045fad20437dcad937ee24166ac29bd2680060ae0bd984b5bdf8d047

    • SHA512

      615486be46074b5feb4d1f41d76381dc9ddb5ed54c8b12096cf2c2a49513cdde6334bfdce0ce042876e31ef95a85c21f947c859873983d56b39dcf1fe6208b7a

    • Emotet

      Emotet is a trojan that is primarily spread through spam emails.

MITRE ATT&CK Matrix

Tasks