General

  • Target

    3ddaa0f6a27f2b7ebbd56299b521cc34

  • Size

    272KB

  • Sample

    240101-zmmhtadae2

  • MD5

    3ddaa0f6a27f2b7ebbd56299b521cc34

  • SHA1

    7b0a5780868e275c6756acc0bb3b3ce71261e8d4

  • SHA256

    bd4e2b43f7488ed691618440d7b95109ed48eea49d25959a0996d80cc8c00a74

  • SHA512

    c41e8da5ce9f90b8debcbc37fb2f5c3aedcead1a8fb43e1e2ee908d2ba799caee007898a9018b200a3cf86eb9a78e8f19fe955f86853d4b7cdbb60be32bdd30a

  • SSDEEP

    6144:ADC5yQfvp9e4YbTaPnEu/+6i5j0Rg/JWIafGX40T:oCBfvLoaPDHiPJgfOn

Malware Config

Extracted

Family

emotet

Botnet

Epoch3

C2

118.110.236.121:8080

149.202.5.139:443

153.92.4.96:8080

51.75.163.68:7080

143.95.101.72:8080

190.225.150.234:80

186.227.146.102:80

181.137.229.1:80

175.29.183.2:80

77.74.78.80:443

175.139.144.229:8080

222.159.240.58:80

190.55.186.229:80

190.190.15.20:80

157.245.138.101:7080

46.32.229.152:8080

195.201.56.70:8080

198.57.203.63:8080

157.7.164.178:8081

189.39.32.161:80

rsa_pubkey.plain

Targets

    • Target

      3ddaa0f6a27f2b7ebbd56299b521cc34

    • Size

      272KB

    • MD5

      3ddaa0f6a27f2b7ebbd56299b521cc34

    • SHA1

      7b0a5780868e275c6756acc0bb3b3ce71261e8d4

    • SHA256

      bd4e2b43f7488ed691618440d7b95109ed48eea49d25959a0996d80cc8c00a74

    • SHA512

      c41e8da5ce9f90b8debcbc37fb2f5c3aedcead1a8fb43e1e2ee908d2ba799caee007898a9018b200a3cf86eb9a78e8f19fe955f86853d4b7cdbb60be32bdd30a

    • SSDEEP

      6144:ADC5yQfvp9e4YbTaPnEu/+6i5j0Rg/JWIafGX40T:oCBfvLoaPDHiPJgfOn

    • Emotet

      Emotet is a trojan that is primarily spread through spam emails.

MITRE ATT&CK Matrix

Tasks