Resubmissions

23-07-2023 18:39

230723-xa5shsgd31 10

General

  • Target

    NA_NA_25476efd5a9f07exeexe_JC.exe

  • Size

    327KB

  • Sample

    230723-xa5shsgd31

  • MD5

    25476efd5a9f079bfb1a19e5b2f4b647

  • SHA1

    e4d77b04e42746f537053697f7895bb71dc8917a

  • SHA256

    b3503b10eeff4b68893a002b243a65ecda7f2ced361f4d488a2532d50760672a

  • SHA512

    88af53101ca18c4631c088034866da776d65da7566482d798b0ba1b8003573cb1b7f2ae557ac3997875b198724460b7275bb72579ac6b7fd233017ddd317f466

  • SSDEEP

    6144:7jNX3w7TC9rybQb3AnUpBlvKLB6bVlWi+e6k46qz2gMEKx6j:7RX3wK9rybO3AlLBeTWi+eO6e2VAj

Malware Config

Extracted

Family

emotet

Botnet

Epoch1

C2

219.92.13.25:80

91.236.4.234:443

192.241.143.52:8080

186.3.232.68:80

192.241.146.84:8080

12.162.84.2:8080

50.28.51.143:8080

221.133.46.86:443

185.94.252.27:443

114.109.179.60:80

186.33.141.88:80

172.104.169.32:8080

184.57.130.8:80

177.139.131.143:443

77.55.211.77:8080

81.169.202.3:443

72.47.248.48:7080

212.71.237.140:8080

190.229.148.144:80

178.79.163.131:8080

rsa_pubkey.plain

Targets

    • Target

      NA_NA_25476efd5a9f07exeexe_JC.exe

    • Size

      327KB

    • MD5

      25476efd5a9f079bfb1a19e5b2f4b647

    • SHA1

      e4d77b04e42746f537053697f7895bb71dc8917a

    • SHA256

      b3503b10eeff4b68893a002b243a65ecda7f2ced361f4d488a2532d50760672a

    • SHA512

      88af53101ca18c4631c088034866da776d65da7566482d798b0ba1b8003573cb1b7f2ae557ac3997875b198724460b7275bb72579ac6b7fd233017ddd317f466

    • SSDEEP

      6144:7jNX3w7TC9rybQb3AnUpBlvKLB6bVlWi+e6k46qz2gMEKx6j:7RX3wK9rybO3AlLBeTWi+eO6e2VAj

    • Emotet

      Emotet is a trojan that is primarily spread through spam emails.

MITRE ATT&CK Matrix ATT&CK v13

Tasks