General

  • Target

    12f6c701e3066a2e4eda1eae43d6d9e7a9f12cac779572f33f2e219a83ae6058

  • Size

    578KB

  • Sample

    220603-l3z7yseba5

  • MD5

    ba3df5ab562b0c2dfe99dc9353f8593a

  • SHA1

    52ee76db4db5c5691f5d14052231405c8af44c34

  • SHA256

    12f6c701e3066a2e4eda1eae43d6d9e7a9f12cac779572f33f2e219a83ae6058

  • SHA512

    ad48a54d607acad5b6af267992070c182e91b19c58a850277c921c0cee6bc460314340577116f7015573f5060198907bd1417193eebd0c608881fc66a546096a

Malware Config

Extracted

Family

emotet

Botnet

Epoch4

C2

164.68.99.3:8080

146.59.226.45:443

51.91.76.89:8080

209.97.163.214:443

158.69.222.101:443

82.165.152.127:8080

103.70.28.102:8080

72.15.201.15:8080

150.95.66.124:8080

45.176.232.124:443

82.223.21.224:8080

107.170.39.149:8080

160.16.142.56:8080

103.132.242.26:8080

153.126.146.25:7080

213.241.20.155:443

1.234.21.73:7080

197.242.150.244:8080

188.44.20.25:443

196.218.30.83:443

eck1.plain
eck1.plain

Targets

    • Target

      12f6c701e3066a2e4eda1eae43d6d9e7a9f12cac779572f33f2e219a83ae6058

    • Size

      578KB

    • MD5

      ba3df5ab562b0c2dfe99dc9353f8593a

    • SHA1

      52ee76db4db5c5691f5d14052231405c8af44c34

    • SHA256

      12f6c701e3066a2e4eda1eae43d6d9e7a9f12cac779572f33f2e219a83ae6058

    • SHA512

      ad48a54d607acad5b6af267992070c182e91b19c58a850277c921c0cee6bc460314340577116f7015573f5060198907bd1417193eebd0c608881fc66a546096a

    • Emotet

      Emotet is a trojan that is primarily spread through spam emails.

MITRE ATT&CK Matrix

Tasks