General

  • Target

    0baa57bc2e463b4713fdc7c6847cd04497320a8a815db821e92a0ce2d5d7752a

  • Size

    704KB

  • Sample

    230408-hb8s8seb3w

  • MD5

    0d819317b9f73dba979b49be9c61bb6c

  • SHA1

    537bf7abba5740b52037a3ea74ed174b6581d536

  • SHA256

    0baa57bc2e463b4713fdc7c6847cd04497320a8a815db821e92a0ce2d5d7752a

  • SHA512

    dd644d9855c1e79a84295cb9da79e7ed14934be3eb38652e051d810c4006ee143afb237691cd806156073fc9d714b2a3b2d856ad1272a8ba3c300ad6a44b0558

  • SSDEEP

    12288:y6ILjk5qGZp+8YEODBeckJxBqx9o5zIwO:y6h30EO2io5TO

Malware Config

Extracted

Family

emotet

Botnet

Epoch5

C2

5.189.160.61:443

94.177.178.26:8080

202.29.239.162:443

54.38.143.246:7080

119.59.125.140:8080

185.148.168.15:8080

188.166.229.148:443

2.58.16.87:8080

104.131.62.48:8080

103.82.248.59:7080

37.59.209.141:8080

103.133.214.242:8080

195.77.239.39:8080

128.199.192.135:8080

78.47.204.80:443

59.148.253.194:443

87.106.97.83:7080

45.71.195.104:8080

85.214.67.203:8080

139.196.72.155:8080

eck1.plain
ecs1.plain

Targets

    • Target

      0baa57bc2e463b4713fdc7c6847cd04497320a8a815db821e92a0ce2d5d7752a

    • Size

      704KB

    • MD5

      0d819317b9f73dba979b49be9c61bb6c

    • SHA1

      537bf7abba5740b52037a3ea74ed174b6581d536

    • SHA256

      0baa57bc2e463b4713fdc7c6847cd04497320a8a815db821e92a0ce2d5d7752a

    • SHA512

      dd644d9855c1e79a84295cb9da79e7ed14934be3eb38652e051d810c4006ee143afb237691cd806156073fc9d714b2a3b2d856ad1272a8ba3c300ad6a44b0558

    • SSDEEP

      12288:y6ILjk5qGZp+8YEODBeckJxBqx9o5zIwO:y6h30EO2io5TO

    • Emotet

      Emotet is a trojan that is primarily spread through spam emails.

MITRE ATT&CK Matrix

Tasks