General

  • Target

    bb33c16d7142bb3ffea0010fa2d12f465eb0735ed6a2c906bec19182ef0ed6ff

  • Size

    493KB

  • Sample

    241112-1a9cgs1hrq

  • MD5

    ba29113ea8e62da381d0601cd2ab7177

  • SHA1

    2b6e3bf651e22a3ae91f89dbe824eb0d8877147b

  • SHA256

    bb33c16d7142bb3ffea0010fa2d12f465eb0735ed6a2c906bec19182ef0ed6ff

  • SHA512

    f1923f77403709bcef6dcbf2ec6d42154f99853316ee2a74615ee91b06c44161a2e55e60678058b197cf0deb8d4ce28f60e5a84cf4509eb2766b41eb53af24c3

  • SSDEEP

    12288:GX21LCAEra89Ya9Fxdu56zMkqSB6izxlt:GG5CAnKYa946Hqi6iFlt

Malware Config

Extracted

Family

emotet

Botnet

Epoch1

C2

24.249.135.121:80

185.94.252.13:443

149.62.173.247:8080

50.28.51.143:8080

80.249.176.206:80

5.196.35.138:7080

190.17.195.202:80

143.0.87.101:80

190.147.137.153:443

181.30.69.50:80

51.255.165.160:8080

190.96.118.251:443

72.47.248.48:7080

178.79.163.131:8080

212.231.60.98:80

187.162.248.237:80

2.47.112.152:80

68.183.190.199:8080

192.241.143.52:8080

77.55.211.77:8080

rsa_pubkey.plain

Targets

    • Target

      bb33c16d7142bb3ffea0010fa2d12f465eb0735ed6a2c906bec19182ef0ed6ff

    • Size

      493KB

    • MD5

      ba29113ea8e62da381d0601cd2ab7177

    • SHA1

      2b6e3bf651e22a3ae91f89dbe824eb0d8877147b

    • SHA256

      bb33c16d7142bb3ffea0010fa2d12f465eb0735ed6a2c906bec19182ef0ed6ff

    • SHA512

      f1923f77403709bcef6dcbf2ec6d42154f99853316ee2a74615ee91b06c44161a2e55e60678058b197cf0deb8d4ce28f60e5a84cf4509eb2766b41eb53af24c3

    • SSDEEP

      12288:GX21LCAEra89Ya9Fxdu56zMkqSB6izxlt:GG5CAnKYa946Hqi6iFlt

MITRE ATT&CK Enterprise v15

Tasks