General

  • Target

    b5c00903aa332df4946749702f39dbf9

  • Size

    758KB

  • Sample

    240229-z2r2vadb62

  • MD5

    b5c00903aa332df4946749702f39dbf9

  • SHA1

    65da29325b9879a52ec851fbd900dbc79fdf4c37

  • SHA256

    262e2f2f64f2e1b77a2497133a3b997f88f0b070e064f5056879881963815aa1

  • SHA512

    50592b94663e4efc0333e168b8823f8c6d52d741dc4e7426f84eb90a68c2cf7688b3100fd6253f6eea86b3b4aa3c68d07f00cc4d5b4443a067b0970fc8589181

  • SSDEEP

    12288:lBseOTwOg957PAMTEFv49thrFcmxLFwD7wGcXbtzbEOpUDlBUawsoei4:keOTwOUPnTC49LJxJwaCOpUD73oei4

Malware Config

Extracted

Family

emotet

Botnet

Epoch5

C2

103.42.57.17:8080

93.104.208.37:8080

195.154.146.35:443

62.171.178.147:8080

37.59.209.141:8080

139.196.72.155:8080

37.44.244.177:8080

191.252.103.16:80

217.182.143.207:443

128.199.192.135:8080

103.41.204.169:8080

185.148.168.15:8080

168.197.250.14:80

78.46.73.125:443

194.9.172.107:8080

185.148.168.220:8080

118.98.72.86:443

54.37.106.167:8080

78.47.204.80:443

159.69.237.188:443

eck1.plain
ecs1.plain

Targets

    • Target

      b5c00903aa332df4946749702f39dbf9

    • Size

      758KB

    • MD5

      b5c00903aa332df4946749702f39dbf9

    • SHA1

      65da29325b9879a52ec851fbd900dbc79fdf4c37

    • SHA256

      262e2f2f64f2e1b77a2497133a3b997f88f0b070e064f5056879881963815aa1

    • SHA512

      50592b94663e4efc0333e168b8823f8c6d52d741dc4e7426f84eb90a68c2cf7688b3100fd6253f6eea86b3b4aa3c68d07f00cc4d5b4443a067b0970fc8589181

    • SSDEEP

      12288:lBseOTwOg957PAMTEFv49thrFcmxLFwD7wGcXbtzbEOpUDlBUawsoei4:keOTwOUPnTC49LJxJwaCOpUD73oei4

    • Emotet

      Emotet is a trojan that is primarily spread through spam emails.

MITRE ATT&CK Matrix

Tasks