General

  • Target

    d0a2344c74973e5df435556244efe2be669cf5ee470014bdd3d2dda3c00c7826

  • Size

    520KB

  • Sample

    220128-d1gntsfaaj

  • MD5

    ca82fbe3e8716fed924d292b05dddb11

  • SHA1

    ec3f166034e8c2f2ab791aa6971c1a7e492c3b28

  • SHA256

    d0a2344c74973e5df435556244efe2be669cf5ee470014bdd3d2dda3c00c7826

  • SHA512

    2470e1efb4dc5461cb2b31f425b1324dd850ff96eb448b925b542af2af2875f3b4a35255f66510e92dff731af57d6ccf5c5e3b663d54b88fb7e75f87b7a3dfcd

Malware Config

Extracted

Family

emotet

Botnet

Epoch5

C2

159.69.43.124:8080

45.79.80.198:443

207.148.81.119:8080

128.199.192.135:8080

118.98.72.86:443

217.182.143.207:443

168.197.250.14:80

116.124.128.206:8080

78.46.73.125:443

185.148.168.15:8080

195.154.146.35:443

85.214.67.203:8080

194.9.172.107:8080

59.148.253.194:443

210.57.209.142:8080

54.38.242.185:443

195.77.239.39:8080

159.69.237.188:443

104.131.62.48:8080

62.171.178.147:8080

eck1.plain
ecs1.plain

Targets

    • Target

      d0a2344c74973e5df435556244efe2be669cf5ee470014bdd3d2dda3c00c7826

    • Size

      520KB

    • MD5

      ca82fbe3e8716fed924d292b05dddb11

    • SHA1

      ec3f166034e8c2f2ab791aa6971c1a7e492c3b28

    • SHA256

      d0a2344c74973e5df435556244efe2be669cf5ee470014bdd3d2dda3c00c7826

    • SHA512

      2470e1efb4dc5461cb2b31f425b1324dd850ff96eb448b925b542af2af2875f3b4a35255f66510e92dff731af57d6ccf5c5e3b663d54b88fb7e75f87b7a3dfcd

    • Emotet

      Emotet is a trojan that is primarily spread through spam emails.

MITRE ATT&CK Matrix

Tasks