General

  • Target

    7739ea30c37dcee9e73e8a5ab91eaf70_NeikiAnalytics.exe

  • Size

    601KB

  • Sample

    240519-fdt2raba2v

  • MD5

    7739ea30c37dcee9e73e8a5ab91eaf70

  • SHA1

    299ab6a716a1fec161a2e87c7816d0c0de32f436

  • SHA256

    f1be1527d5615b74c6ee6a73ad3aa164f2071ec4f2fe8b6e2a7e76a7e57bc37d

  • SHA512

    4f108d8b111368ea304a3dee8576023a9d40fd20863141469c141319fa3f1464f4513b1867c92ddec5ecf43e9cfab503d9036c62c14144d5c1f7d927fe7f47c5

  • SSDEEP

    12288:TZJYswfXG5EIs1XHy7W5OPV9f1jCdJozSGKkyJxnpFx:TZJWXVIs1XHhEhMjZGMLnL

Malware Config

Extracted

Family

emotet

Botnet

Epoch4

C2

45.118.115.99:8080

189.126.111.200:7080

79.137.35.198:8080

103.43.46.182:443

102.222.215.74:443

103.70.28.102:8080

196.218.30.83:443

146.59.226.45:443

5.9.116.246:8080

164.68.99.3:8080

163.44.196.120:8080

167.99.115.35:8080

209.250.246.206:443

183.111.227.137:8080

46.55.222.11:443

45.235.8.30:8080

51.91.76.89:8080

107.182.225.142:8080

103.132.242.26:8080

45.176.232.124:443

ecs1.plain
eck1.plain

Targets

    • Target

      7739ea30c37dcee9e73e8a5ab91eaf70_NeikiAnalytics.exe

    • Size

      601KB

    • MD5

      7739ea30c37dcee9e73e8a5ab91eaf70

    • SHA1

      299ab6a716a1fec161a2e87c7816d0c0de32f436

    • SHA256

      f1be1527d5615b74c6ee6a73ad3aa164f2071ec4f2fe8b6e2a7e76a7e57bc37d

    • SHA512

      4f108d8b111368ea304a3dee8576023a9d40fd20863141469c141319fa3f1464f4513b1867c92ddec5ecf43e9cfab503d9036c62c14144d5c1f7d927fe7f47c5

    • SSDEEP

      12288:TZJYswfXG5EIs1XHy7W5OPV9f1jCdJozSGKkyJxnpFx:TZJWXVIs1XHhEhMjZGMLnL

    • Emotet

      Emotet is a trojan that is primarily spread through spam emails.

MITRE ATT&CK Matrix

Tasks