General

  • Target

    613c6a1cdedfb0bdab8de6af0747f3761310bb6acb7b4f7c952f8b8bf4e02782

  • Size

    425KB

  • Sample

    220630-lmzw9ahggr

  • MD5

    eeda12c1f32e0d39937ac57ac49bd4ef

  • SHA1

    ed3ca2d9b2c252e76f055656ecebb9fd66647df2

  • SHA256

    613c6a1cdedfb0bdab8de6af0747f3761310bb6acb7b4f7c952f8b8bf4e02782

  • SHA512

    fe8170ae7e6ac35b9a9f998ad04a0c82b97b288aa58247aaec575869b97c2131245ab9458e57a60bb32d520009217e11756a5dee5a3958339b3a952cede41bc7

Malware Config

Extracted

Family

emotet

Botnet

Epoch4

C2

172.104.251.154:8080

51.161.73.194:443

101.50.0.91:8080

91.207.28.33:8080

119.193.124.41:7080

150.95.66.124:8080

103.132.242.26:8080

37.187.115.122:8080

172.105.226.75:8080

131.100.24.231:80

196.218.30.83:443

79.137.35.198:8080

103.75.201.2:443

82.223.21.224:8080

153.126.146.25:7080

146.59.226.45:443

209.97.163.214:443

186.194.240.217:443

197.242.150.244:8080

45.118.115.99:8080

eck1.plain
ecs1.plain

Targets

    • Target

      613c6a1cdedfb0bdab8de6af0747f3761310bb6acb7b4f7c952f8b8bf4e02782

    • Size

      425KB

    • MD5

      eeda12c1f32e0d39937ac57ac49bd4ef

    • SHA1

      ed3ca2d9b2c252e76f055656ecebb9fd66647df2

    • SHA256

      613c6a1cdedfb0bdab8de6af0747f3761310bb6acb7b4f7c952f8b8bf4e02782

    • SHA512

      fe8170ae7e6ac35b9a9f998ad04a0c82b97b288aa58247aaec575869b97c2131245ab9458e57a60bb32d520009217e11756a5dee5a3958339b3a952cede41bc7

    • Emotet

      Emotet is a trojan that is primarily spread through spam emails.

    • suricata: ET MALWARE W32/Emotet CnC Beacon 3

      suricata: ET MALWARE W32/Emotet CnC Beacon 3

MITRE ATT&CK Matrix

Tasks