General

  • Target

    e918668182864b0bce4d29965e2d4d4250e7453fd71f6381ebbd44dc8bd0ef04

  • Size

    317KB

  • Sample

    230228-tqvqpsbg5x

  • MD5

    0f1131008c7f6cd6975226af753529cd

  • SHA1

    ae2ab7174b0a7bddee5fade79620bdfd014eb9e5

  • SHA256

    e918668182864b0bce4d29965e2d4d4250e7453fd71f6381ebbd44dc8bd0ef04

  • SHA512

    14e9729b09d8ff9b20235b5df63be153404f0041d8245c6a2f467ff842c2a9cf9379952670b55d004fd05519aa03c1f2ba32b00f92eec14e50af00562553e135

  • SSDEEP

    6144:2sCQoj6Fsgyf+pzFqTLY49YyvnUSY8lcJiqjl7JN7mdncXN2:2sCQoj6FsZ+6TLYMMSY82R7J1mqXN

Malware Config

Extracted

Family

emotet

Botnet

Epoch5

C2

175.126.176.79:8080

188.225.32.231:4143

64.227.55.231:8080

87.106.97.83:7080

167.86.75.145:443

103.41.204.169:8080

88.217.172.165:8080

178.62.112.199:8080

165.232.185.110:8080

54.37.228.122:443

202.29.239.162:443

37.44.244.177:8080

139.196.72.155:8080

157.245.111.0:8080

36.67.23.59:443

190.145.8.4:443

103.254.12.236:7080

202.134.4.210:7080

190.107.19.179:443

165.22.254.236:8080

eck1.plain
ecs1.plain

Targets

    • Target

      e918668182864b0bce4d29965e2d4d4250e7453fd71f6381ebbd44dc8bd0ef04

    • Size

      317KB

    • MD5

      0f1131008c7f6cd6975226af753529cd

    • SHA1

      ae2ab7174b0a7bddee5fade79620bdfd014eb9e5

    • SHA256

      e918668182864b0bce4d29965e2d4d4250e7453fd71f6381ebbd44dc8bd0ef04

    • SHA512

      14e9729b09d8ff9b20235b5df63be153404f0041d8245c6a2f467ff842c2a9cf9379952670b55d004fd05519aa03c1f2ba32b00f92eec14e50af00562553e135

    • SSDEEP

      6144:2sCQoj6Fsgyf+pzFqTLY49YyvnUSY8lcJiqjl7JN7mdncXN2:2sCQoj6FsZ+6TLYMMSY82R7J1mqXN

    • Emotet

      Emotet is a trojan that is primarily spread through spam emails.

MITRE ATT&CK Matrix

Tasks