General

  • Target

    c7213ca1d8dc91059336d44a233d6bc208f2bcc07ccb32ea5e3c354296c77964

  • Size

    524KB

  • Sample

    220706-f24abshccn

  • MD5

    627f01d3d5af6022b61b6db5aff6b25a

  • SHA1

    1b86367d5a03c0b2fdaf1b81935405e635f248d9

  • SHA256

    c7213ca1d8dc91059336d44a233d6bc208f2bcc07ccb32ea5e3c354296c77964

  • SHA512

    31bedd673f8c7b5d55f8d9bf0a258159e8ae4f4879612983f391a75a2eac401e759fc176910a7a343a8eeab1bb7fe106a67f31302335df74b4d298896fe4638e

Malware Config

Extracted

Family

emotet

Botnet

Epoch5

C2

103.71.99.57:8080

103.224.241.74:8080

157.245.111.0:8080

37.44.244.177:8080

103.41.204.169:8080

64.227.55.231:8080

103.254.12.236:7080

103.85.95.4:8080

157.230.99.206:8080

165.22.254.236:8080

85.214.67.203:8080

54.37.228.122:443

195.77.239.39:8080

128.199.217.206:443

190.145.8.4:443

165.232.185.110:8080

188.165.79.151:443

178.62.112.199:8080

54.37.106.167:8080

104.244.79.94:443

eck1.plain
ecs1.plain

Targets

    • Target

      c7213ca1d8dc91059336d44a233d6bc208f2bcc07ccb32ea5e3c354296c77964

    • Size

      524KB

    • MD5

      627f01d3d5af6022b61b6db5aff6b25a

    • SHA1

      1b86367d5a03c0b2fdaf1b81935405e635f248d9

    • SHA256

      c7213ca1d8dc91059336d44a233d6bc208f2bcc07ccb32ea5e3c354296c77964

    • SHA512

      31bedd673f8c7b5d55f8d9bf0a258159e8ae4f4879612983f391a75a2eac401e759fc176910a7a343a8eeab1bb7fe106a67f31302335df74b4d298896fe4638e

    • Emotet

      Emotet is a trojan that is primarily spread through spam emails.

    • suricata: ET MALWARE W32/Emotet CnC Beacon 3

      suricata: ET MALWARE W32/Emotet CnC Beacon 3

MITRE ATT&CK Matrix

Tasks