General

  • Target

    3a0854a158a6c7a33abd70564205566056ddd7492e21a2e479804394ba9db0a5

  • Size

    536KB

  • Sample

    241112-1bgzma1hmc

  • MD5

    2d59abea3b573f538807ada77706f27b

  • SHA1

    07da0ca22c544464e04f8947eb69040a2da2593a

  • SHA256

    3a0854a158a6c7a33abd70564205566056ddd7492e21a2e479804394ba9db0a5

  • SHA512

    8933e450b4012c36d204ff6c182336794fd21d868fc3a0cb743ddfaef7658ef257acae3eb5a529d3c7ee539c149b44f02d5b4622bebc0c9cd33cc823aa08b8c7

  • SSDEEP

    6144:QPfWkleyS7zxi2BR3oQ8TIQCPEPpXc5n4:UfWBNR3oDTlUEPpXc5n

Malware Config

Extracted

Family

emotet

Botnet

Epoch1

C2

144.139.91.187:443

157.7.199.53:8080

189.218.165.63:80

104.236.161.64:8080

2.47.112.152:80

185.94.252.27:443

202.62.39.111:80

190.17.195.202:80

143.0.87.101:80

70.32.84.74:8080

45.161.242.102:80

190.194.242.254:443

50.28.51.143:8080

204.225.249.100:7080

137.74.106.111:7080

68.183.170.114:8080

181.31.211.181:80

149.62.173.247:8080

177.75.143.112:443

190.229.148.144:80

rsa_pubkey.plain

Targets

    • Target

      3a0854a158a6c7a33abd70564205566056ddd7492e21a2e479804394ba9db0a5

    • Size

      536KB

    • MD5

      2d59abea3b573f538807ada77706f27b

    • SHA1

      07da0ca22c544464e04f8947eb69040a2da2593a

    • SHA256

      3a0854a158a6c7a33abd70564205566056ddd7492e21a2e479804394ba9db0a5

    • SHA512

      8933e450b4012c36d204ff6c182336794fd21d868fc3a0cb743ddfaef7658ef257acae3eb5a529d3c7ee539c149b44f02d5b4622bebc0c9cd33cc823aa08b8c7

    • SSDEEP

      6144:QPfWkleyS7zxi2BR3oQ8TIQCPEPpXc5n4:UfWBNR3oDTlUEPpXc5n

MITRE ATT&CK Enterprise v15

Tasks