General

  • Target

    407c85a767fbf96c33a551ed059544d7b47147293a0468aa2e8a9a470361b952

  • Size

    352KB

  • Sample

    241112-1b3aka1jc1

  • MD5

    193f7f478b04c7b45049111c00bebdfc

  • SHA1

    0f9fdcfb2a2fd48e47258a07586d2fc5969b608a

  • SHA256

    407c85a767fbf96c33a551ed059544d7b47147293a0468aa2e8a9a470361b952

  • SHA512

    9832ee6f5b6a1192fccc553de8833e4a88a39712c62d5f0e1ba9f0093b10da30b9cbb5007b2c2a6a5cff26381e5bf5ca15d63dd1eb2a575b7e1b50b60742b90b

  • SSDEEP

    3072:d8mwsa9cVPqRn6ubgBXTO473LeMCfvQHgebACG363bDdToIXtGgpeBg7cPEd166V:dG9FRn6ubgBN730fudTom7cPiJsfk

Malware Config

Extracted

Family

emotet

Botnet

Epoch3

C2

82.78.179.117:443

91.121.87.90:8080

104.131.144.215:8080

188.226.165.170:8080

94.212.52.40:80

113.203.238.130:80

116.202.10.123:8080

118.243.83.70:80

74.208.173.91:8080

143.95.101.72:8080

118.33.121.37:80

103.229.73.17:8080

113.161.148.81:80

185.208.226.142:8080

195.201.56.70:8080

190.117.101.56:80

54.38.143.245:8080

190.164.135.81:80

75.127.14.170:8080

113.193.239.51:443

rsa_pubkey.plain

Targets

    • Target

      407c85a767fbf96c33a551ed059544d7b47147293a0468aa2e8a9a470361b952

    • Size

      352KB

    • MD5

      193f7f478b04c7b45049111c00bebdfc

    • SHA1

      0f9fdcfb2a2fd48e47258a07586d2fc5969b608a

    • SHA256

      407c85a767fbf96c33a551ed059544d7b47147293a0468aa2e8a9a470361b952

    • SHA512

      9832ee6f5b6a1192fccc553de8833e4a88a39712c62d5f0e1ba9f0093b10da30b9cbb5007b2c2a6a5cff26381e5bf5ca15d63dd1eb2a575b7e1b50b60742b90b

    • SSDEEP

      3072:d8mwsa9cVPqRn6ubgBXTO473LeMCfvQHgebACG363bDdToIXtGgpeBg7cPEd166V:dG9FRn6ubgBN730fudTom7cPiJsfk

MITRE ATT&CK Enterprise v15

Tasks