General

  • Target

    d2846421fa60ad783fff6db5d7d1a1d51533bedc50a69289d4851f142fd6e83d

  • Size

    716KB

  • Sample

    220201-zq79pabefp

  • MD5

    2a7eac78eb491c3e7d8ae305cfc06f9e

  • SHA1

    4e69e66403a3dbe09dff54f1cac6c0c50dcd4e1a

  • SHA256

    d2846421fa60ad783fff6db5d7d1a1d51533bedc50a69289d4851f142fd6e83d

  • SHA512

    e4d45740be042ddc5ebaf2ff55e6760cf14e83a4db42538f45909bcc98666bd2a995e52fdf646475d47cb6c698384ea60ade818bfd832bde7ee58d321ccee7d2

Malware Config

Extracted

Family

emotet

Botnet

Epoch4

C2

149.202.179.100:443

103.75.201.4:443

129.232.188.93:443

50.116.54.215:443

203.114.109.124:443

217.182.143.207:443

212.237.5.209:443

79.172.212.216:8080

144.76.186.49:8080

159.8.59.82:8080

131.100.24.231:80

212.237.17.99:8080

81.0.236.90:443

159.89.230.105:443

164.68.99.3:8080

212.237.56.116:7080

162.243.175.63:443

195.154.133.20:443

110.232.117.186:8080

45.142.114.231:8080

eck1.plain
ecs1.plain

Targets

    • Target

      d2846421fa60ad783fff6db5d7d1a1d51533bedc50a69289d4851f142fd6e83d

    • Size

      716KB

    • MD5

      2a7eac78eb491c3e7d8ae305cfc06f9e

    • SHA1

      4e69e66403a3dbe09dff54f1cac6c0c50dcd4e1a

    • SHA256

      d2846421fa60ad783fff6db5d7d1a1d51533bedc50a69289d4851f142fd6e83d

    • SHA512

      e4d45740be042ddc5ebaf2ff55e6760cf14e83a4db42538f45909bcc98666bd2a995e52fdf646475d47cb6c698384ea60ade818bfd832bde7ee58d321ccee7d2

    • Emotet

      Emotet is a trojan that is primarily spread through spam emails.

MITRE ATT&CK Matrix

Tasks