General

  • Target

    1ab6cdd8f72f52dc81b82c3abbafb2c0_NeikiAnalytics.exe

  • Size

    33KB

  • Sample

    240527-c56m3sdd5s

  • MD5

    1ab6cdd8f72f52dc81b82c3abbafb2c0

  • SHA1

    58ff0779f267d00c1928eb67a0b4fa1f74e9bcbe

  • SHA256

    9958b0c28e4cacb4ba50c2cf176839c50d920dab06b2b8b958dd47fd78940aa8

  • SHA512

    590ac14e8fa8ec98025dc5339b3096ab393f999835dd1a161e97455a65cd0a616108eb0877202f17d1a9cebf66265037debceed9881a9f532c6a1ef54a8d6485

  • SSDEEP

    768:rOMtvRrUOKMfous8C+ZeUDtY6ENNglEajvuZTpSO0biEomV:SMtvR42flXhDK60NkQpSO0bRomV

Malware Config

Extracted

Family

emotet

Botnet

Epoch1

C2

144.139.91.187:443

157.7.199.53:8080

189.218.165.63:80

104.236.161.64:8080

2.47.112.152:80

185.94.252.27:443

202.62.39.111:80

190.17.195.202:80

143.0.87.101:80

70.32.84.74:8080

45.161.242.102:80

190.194.242.254:443

50.28.51.143:8080

204.225.249.100:7080

137.74.106.111:7080

68.183.170.114:8080

181.31.211.181:80

149.62.173.247:8080

177.75.143.112:443

190.229.148.144:80

rsa_pubkey.plain

Targets

    • Target

      1ab6cdd8f72f52dc81b82c3abbafb2c0_NeikiAnalytics.exe

    • Size

      33KB

    • MD5

      1ab6cdd8f72f52dc81b82c3abbafb2c0

    • SHA1

      58ff0779f267d00c1928eb67a0b4fa1f74e9bcbe

    • SHA256

      9958b0c28e4cacb4ba50c2cf176839c50d920dab06b2b8b958dd47fd78940aa8

    • SHA512

      590ac14e8fa8ec98025dc5339b3096ab393f999835dd1a161e97455a65cd0a616108eb0877202f17d1a9cebf66265037debceed9881a9f532c6a1ef54a8d6485

    • SSDEEP

      768:rOMtvRrUOKMfous8C+ZeUDtY6ENNglEajvuZTpSO0biEomV:SMtvR42flXhDK60NkQpSO0bRomV

    Score
    3/10

MITRE ATT&CK Matrix

Tasks