General

  • Target

    19fcf233637e0ca65c4eef3b234d3c79ad1604b524da1b1f292cf7e7dcaf13aa.bin

  • Size

    548KB

  • Sample

    230421-sxxyzaac6y

  • MD5

    b232b0df5d369ef0f7597f215c32043a

  • SHA1

    4a4fb865f1243ea1983044337500448e38557af0

  • SHA256

    19fcf233637e0ca65c4eef3b234d3c79ad1604b524da1b1f292cf7e7dcaf13aa

  • SHA512

    ac0de59877c9379bcd830b83b68551706afd5dfad05456ec48f534c650eac9c263ec1d03cd508a95157557459cfe1c1cfa890362ce38b8ee6e7b2643ec7ddb72

  • SSDEEP

    12288:Zt5888qi2yYmoYa8Zp3C/EogW4cpaxUhNV/b/:Zz7coTg3C/a3cIgJb

Malware Config

Extracted

Family

emotet

Botnet

Epoch4

C2

82.223.21.224:8080

173.212.193.249:8080

82.165.152.127:8080

151.106.112.196:8080

160.16.142.56:8080

163.44.196.120:8080

103.70.28.102:8080

164.68.99.3:8080

51.161.73.194:443

146.59.226.45:443

104.168.155.143:8080

101.50.0.91:8080

94.23.45.86:4143

167.172.253.162:8080

5.9.116.246:8080

185.4.135.165:8080

159.65.140.115:443

212.24.98.99:8080

209.97.163.214:443

206.189.28.199:8080

eck1.plain
ecs1.plain

Targets

    • Target

      19fcf233637e0ca65c4eef3b234d3c79ad1604b524da1b1f292cf7e7dcaf13aa.bin

    • Size

      548KB

    • MD5

      b232b0df5d369ef0f7597f215c32043a

    • SHA1

      4a4fb865f1243ea1983044337500448e38557af0

    • SHA256

      19fcf233637e0ca65c4eef3b234d3c79ad1604b524da1b1f292cf7e7dcaf13aa

    • SHA512

      ac0de59877c9379bcd830b83b68551706afd5dfad05456ec48f534c650eac9c263ec1d03cd508a95157557459cfe1c1cfa890362ce38b8ee6e7b2643ec7ddb72

    • SSDEEP

      12288:Zt5888qi2yYmoYa8Zp3C/EogW4cpaxUhNV/b/:Zz7coTg3C/a3cIgJb

    • Emotet

      Emotet is a trojan that is primarily spread through spam emails.

MITRE ATT&CK Matrix

Tasks