General

  • Target

    c14708e51601119c464bdd1db7d6c8ae3f98c264.zip

  • Size

    25KB

  • Sample

    221108-ks4a7agea8

  • MD5

    e05f5578db6b67c056969c4545bea3ef

  • SHA1

    decdeec7467cbe99678b266cacd1a6e74731cf1d

  • SHA256

    cd60db022a7bc26779066ac776392f262dd9021b5d34d2147b248a7e9d35fa4d

  • SHA512

    673d6a96bd7c05aeb9c1fee94d4564f2252d42a1198e58bec02d8eaf72ea5a1bb2f1ae0c1e627cfb1702cf2539b0b23ec08f9f60d1f0231d8523a83a55973bac

  • SSDEEP

    384:LZGcTg8FIMlSfnfkiZsy5il2q7YeEm2JZRRhiSk3y11DZCoF1UcVDcB8FyjTd3gA:L8cTbrOcOs4iTZ2JhD1sNidMP/Ll

Malware Config

Extracted

Family

emotet

Botnet

Epoch2

C2

74.219.172.26:80

134.209.36.254:8080

104.156.59.7:8080

120.138.30.150:8080

194.187.133.160:443

104.236.246.93:8080

74.208.45.104:8080

78.187.156.31:80

187.161.206.24:80

94.23.216.33:80

172.91.208.86:80

91.211.88.52:7080

50.91.114.38:80

200.123.150.89:443

121.124.124.40:7080

62.75.141.82:80

5.196.74.210:8080

24.137.76.62:80

85.105.205.77:8080

139.130.242.43:80

rsa_pubkey.plain

Targets

    • Target

      c14708e51601119c464bdd1db7d6c8ae3f98c264.rl

    • Size

      48KB

    • MD5

      d6805af1d7c197472bcf03b7d648b4c3

    • SHA1

      c14708e51601119c464bdd1db7d6c8ae3f98c264

    • SHA256

      bce8fd475ac57dcce687174796d3972fed404d299fa57369a4f3c649fae37b23

    • SHA512

      715702ee4f5e2064bbd0fc6ba81b6dd72bf78be987a99150f4b9bd5cf2045e7ceab0f2411d131bccadeebdcc96ed56a0aa1c9bd48d049f05c7e2146422818a16

    • SSDEEP

      768:ltjzNkPg7zHHUFStU0IFZZqL3Q9ro4XDJzJxwLLQkmdIhrUhbvl9vsA2W1BZjAwb:HpkPg/TU0hL3Q9ro4Xlw3QkmdIh4hzlH

    Score
    1/10

MITRE ATT&CK Matrix

Tasks