General

  • Target

    a33c65b61b14ce0dcd9dff91d06abb92e6855a9d68f27c7b1e17821069b693f9.exe

  • Size

    846KB

  • Sample

    240524-ep7ljscf2w

  • MD5

    c27f597f08c117de1a46aa9e1319d540

  • SHA1

    fbb44c01435ea5278017eb91cea66764a1798a60

  • SHA256

    a33c65b61b14ce0dcd9dff91d06abb92e6855a9d68f27c7b1e17821069b693f9

  • SHA512

    7b11b9d416cbec9022bef648ae4e6072df46a4d14d0fab798ded8ce39d2c3ae1960c0d139e2596bfb317af76dd42dbf6ebd743137b17f10660e148eebe91df3f

  • SSDEEP

    24576:sPMTg9U3G0ISDKvSeqfZaePWAy7empE3:BTg9UXRD2SeqfZZiam

Malware Config

Extracted

Family

emotet

Botnet

Epoch5

C2

207.148.81.119:8080

159.69.237.188:443

103.8.26.17:8080

194.9.172.107:8080

188.225.32.231:4143

103.56.149.105:8080

139.196.72.155:8080

190.90.233.66:443

37.59.209.141:8080

217.182.143.207:443

78.46.73.125:443

78.47.204.80:443

116.124.128.206:8080

45.71.195.104:8080

87.106.97.83:7080

178.62.112.199:8080

175.126.176.79:8080

134.122.119.23:8080

51.68.141.164:8080

203.153.216.46:443

ecs1.plain
eck1.plain

Targets

    • Target

      a33c65b61b14ce0dcd9dff91d06abb92e6855a9d68f27c7b1e17821069b693f9.exe

    • Size

      846KB

    • MD5

      c27f597f08c117de1a46aa9e1319d540

    • SHA1

      fbb44c01435ea5278017eb91cea66764a1798a60

    • SHA256

      a33c65b61b14ce0dcd9dff91d06abb92e6855a9d68f27c7b1e17821069b693f9

    • SHA512

      7b11b9d416cbec9022bef648ae4e6072df46a4d14d0fab798ded8ce39d2c3ae1960c0d139e2596bfb317af76dd42dbf6ebd743137b17f10660e148eebe91df3f

    • SSDEEP

      24576:sPMTg9U3G0ISDKvSeqfZaePWAy7empE3:BTg9UXRD2SeqfZZiam

    • Emotet

      Emotet is a trojan that is primarily spread through spam emails.

MITRE ATT&CK Matrix

Tasks