Resubmissions

22-05-2023 16:48

230522-vbhchacb91 10

22-05-2023 16:45

230522-t9tyhscb9v 10

22-05-2023 16:44

230522-t89btabd87 10

General

  • Target

    16882c19110d83abb8f3fdf27eeef8c2454628c2c0a1d50dd510c91c5c8b3b4f

  • Size

    221KB

  • Sample

    230522-vbhchacb91

  • MD5

    6596e0d41566ec04b0cddeba2684031f

  • SHA1

    7ef19b4e4f4a6c082fd34a0aff98012a7156dfb8

  • SHA256

    16882c19110d83abb8f3fdf27eeef8c2454628c2c0a1d50dd510c91c5c8b3b4f

  • SHA512

    57023ddfc4eb1c336f5ef3118e633ce554c2a211bc43a705a934847e3188be0d50a9a91ee131773be51d9dbbfbdd5da6417c58377c361fe02c33101dfed2f5ec

  • SSDEEP

    3072:1wBnSH3FbVlOocK1n9pOXuxQQQFQQw5Bu3PykO:upSHJOocK1nzhxQQQFQQw5Buc

Malware Config

Extracted

Family

emotet

Botnet

Epoch3

C2

152.32.75.74:443

91.121.200.35:8080

159.203.16.11:8080

188.226.165.170:8080

172.193.79.237:80

123.216.134.52:80

183.91.3.63:80

139.59.61.215:443

185.80.172.199:80

77.74.78.80:443

153.229.219.1:443

113.203.238.130:80

120.51.34.254:80

116.202.10.123:8080

5.2.246.108:80

50.116.78.109:8080

103.80.51.61:8080

190.55.186.229:80

185.142.236.163:443

223.17.215.76:80

rsa_pubkey.plain

Targets

    • Target

      16882c19110d83abb8f3fdf27eeef8c2454628c2c0a1d50dd510c91c5c8b3b4f

    • Size

      221KB

    • MD5

      6596e0d41566ec04b0cddeba2684031f

    • SHA1

      7ef19b4e4f4a6c082fd34a0aff98012a7156dfb8

    • SHA256

      16882c19110d83abb8f3fdf27eeef8c2454628c2c0a1d50dd510c91c5c8b3b4f

    • SHA512

      57023ddfc4eb1c336f5ef3118e633ce554c2a211bc43a705a934847e3188be0d50a9a91ee131773be51d9dbbfbdd5da6417c58377c361fe02c33101dfed2f5ec

    • SSDEEP

      3072:1wBnSH3FbVlOocK1n9pOXuxQQQFQQw5Bu3PykO:upSHJOocK1nzhxQQQFQQw5Buc

    Score
    1/10

MITRE ATT&CK Matrix

Tasks