General

  • Target

    dba18326088d675a934af64e08382159bb5c6d30d80994f88e6d0228289e3e5c

  • Size

    314KB

  • Sample

    220623-r37jxsdefq

  • MD5

    54a91898309291843b3e96bcd46a8e6b

  • SHA1

    a7222293bc9bb18da18bd8b778628fe64ca068c2

  • SHA256

    dba18326088d675a934af64e08382159bb5c6d30d80994f88e6d0228289e3e5c

  • SHA512

    33a9b927063e7bb3b48c66dbc5e7e1d46eaba4786b85e21900d2b8e98e270cdb88e73fb756e985185d0fdc0712f10a801c8db9b8667a4590d34b5eee4b9bc8a2

Malware Config

Extracted

Family

emotet

Botnet

Epoch4

C2

82.165.152.127:8080

51.161.73.194:443

103.75.201.2:443

5.9.116.246:8080

213.241.20.155:443

79.137.35.198:8080

119.193.124.41:7080

186.194.240.217:443

172.105.226.75:8080

150.95.66.124:8080

131.100.24.231:80

94.23.45.86:4143

209.97.163.214:443

206.189.28.199:8080

173.212.193.249:8080

153.126.146.25:7080

51.91.76.89:8080

1.234.2.232:8080

163.44.196.120:8080

149.56.131.28:8080

eck1.plain
ecs1.plain

Targets

    • Target

      dba18326088d675a934af64e08382159bb5c6d30d80994f88e6d0228289e3e5c

    • Size

      314KB

    • MD5

      54a91898309291843b3e96bcd46a8e6b

    • SHA1

      a7222293bc9bb18da18bd8b778628fe64ca068c2

    • SHA256

      dba18326088d675a934af64e08382159bb5c6d30d80994f88e6d0228289e3e5c

    • SHA512

      33a9b927063e7bb3b48c66dbc5e7e1d46eaba4786b85e21900d2b8e98e270cdb88e73fb756e985185d0fdc0712f10a801c8db9b8667a4590d34b5eee4b9bc8a2

    • Emotet

      Emotet is a trojan that is primarily spread through spam emails.

    • suricata: ET MALWARE W32/Emotet CnC Beacon 3

      suricata: ET MALWARE W32/Emotet CnC Beacon 3

MITRE ATT&CK Matrix

Tasks