General

  • Target

    c0cc65c2bd66cc2c376cbccfef2323d5c0d752f1af81a743a1e29f2c09590b26

  • Size

    426KB

  • Sample

    221114-y2dnsadd49

  • MD5

    ea28640f5b8a710e53617712c7c83089

  • SHA1

    9fc1f3b2f13508bb892d3113f5a48ba6e5a1cba3

  • SHA256

    c0cc65c2bd66cc2c376cbccfef2323d5c0d752f1af81a743a1e29f2c09590b26

  • SHA512

    7b28a936b9c6bf1c2e5da194ec7bcd3691c05a3db06bdd2d64bda9313adfc776dec3f26fca331e78cb07743af6d1c5b4bdd13a763bbf3190a84853ab85abba7a

  • SSDEEP

    6144:Cc9BlQTLzhMBFErH5FNVublfQrN83ZgJA4t+nxeeiZAQ7LxR+fvGuwcQBPkY2dRS:PHlm8+3Olf+Yct+xANsvXqPj2qW5Md0

Malware Config

Extracted

Family

emotet

Botnet

Epoch5

C2

202.28.34.99:8080

80.211.107.116:8080

175.126.176.79:8080

218.38.121.17:443

139.196.72.155:8080

103.71.99.57:8080

87.106.97.83:7080

178.62.112.199:8080

64.227.55.231:8080

46.101.98.60:8080

54.37.228.122:443

128.199.217.206:443

190.145.8.4:443

209.239.112.82:8080

85.214.67.203:8080

198.199.70.22:8080

128.199.242.164:8080

178.238.225.252:8080

103.85.95.4:8080

103.126.216.86:443

eck1.plain
ecs1.plain

Targets

    • Target

      c0cc65c2bd66cc2c376cbccfef2323d5c0d752f1af81a743a1e29f2c09590b26

    • Size

      426KB

    • MD5

      ea28640f5b8a710e53617712c7c83089

    • SHA1

      9fc1f3b2f13508bb892d3113f5a48ba6e5a1cba3

    • SHA256

      c0cc65c2bd66cc2c376cbccfef2323d5c0d752f1af81a743a1e29f2c09590b26

    • SHA512

      7b28a936b9c6bf1c2e5da194ec7bcd3691c05a3db06bdd2d64bda9313adfc776dec3f26fca331e78cb07743af6d1c5b4bdd13a763bbf3190a84853ab85abba7a

    • SSDEEP

      6144:Cc9BlQTLzhMBFErH5FNVublfQrN83ZgJA4t+nxeeiZAQ7LxR+fvGuwcQBPkY2dRS:PHlm8+3Olf+Yct+xANsvXqPj2qW5Md0

MITRE ATT&CK Enterprise v6

Tasks