General

  • Target

    62b05ad0159b7cfb3108236411b84bb3153f9468939062a591f6b83181098cd1

  • Size

    580KB

  • Sample

    220605-f2cglscehj

  • MD5

    731211666ede37a6bc51f90c8469ba2b

  • SHA1

    4a59ef1f0e0a3383837500a7319e9cf2706c22e7

  • SHA256

    62b05ad0159b7cfb3108236411b84bb3153f9468939062a591f6b83181098cd1

  • SHA512

    2cb5579cd1bad58d2abb1fa61515159ed76ba92eacc66bc8aeae847f3421cc5fd4c401e5442b3f5a8b5430f5710c413ccacd3353558ab9b76b50c2d8f9e08c7d

Malware Config

Extracted

Family

emotet

Botnet

Epoch4

C2

164.68.99.3:8080

146.59.226.45:443

51.91.76.89:8080

209.97.163.214:443

158.69.222.101:443

82.165.152.127:8080

103.70.28.102:8080

72.15.201.15:8080

150.95.66.124:8080

45.176.232.124:443

82.223.21.224:8080

107.170.39.149:8080

160.16.142.56:8080

103.132.242.26:8080

153.126.146.25:7080

213.241.20.155:443

1.234.21.73:7080

197.242.150.244:8080

188.44.20.25:443

196.218.30.83:443

eck1.plain
eck1.plain

Targets

    • Target

      62b05ad0159b7cfb3108236411b84bb3153f9468939062a591f6b83181098cd1

    • Size

      580KB

    • MD5

      731211666ede37a6bc51f90c8469ba2b

    • SHA1

      4a59ef1f0e0a3383837500a7319e9cf2706c22e7

    • SHA256

      62b05ad0159b7cfb3108236411b84bb3153f9468939062a591f6b83181098cd1

    • SHA512

      2cb5579cd1bad58d2abb1fa61515159ed76ba92eacc66bc8aeae847f3421cc5fd4c401e5442b3f5a8b5430f5710c413ccacd3353558ab9b76b50c2d8f9e08c7d

    • Emotet

      Emotet is a trojan that is primarily spread through spam emails.

MITRE ATT&CK Matrix

Tasks