General

  • Target

    2ca6a641d567d699173736bdc9f3478b7678456fa12e42bd899f074e8e726ec9

  • Size

    527KB

  • Sample

    241112-1bjhfsvmfj

  • MD5

    a9b0915039ac6716eafc99651d9ca0e3

  • SHA1

    af4fcc10d47e90150f0ce789f75bdb191a2cf243

  • SHA256

    2ca6a641d567d699173736bdc9f3478b7678456fa12e42bd899f074e8e726ec9

  • SHA512

    8988f8ba94c5978ceeffdde83667f697b8e1f38b31cfc31f274194128a269768530201a2039f57ad8ac732784a8e6361b5c1718b3f32792d54d7672dbc5e54b2

  • SSDEEP

    6144:GRQUWntghU/R+WtlgxTGZE7AeZ5V3Mi8oRifx/7/AOkcNlJ+jOUTWolWVS/NeCcS:OUtghUkiKiZkAeZ5V3doKy+iQVsV0/

Malware Config

Extracted

Family

emotet

Botnet

Epoch4

C2

144.217.91.150:443

51.38.71.0:443

212.237.56.116:7080

79.172.212.216:8080

178.79.147.66:8080

138.185.72.26:8080

192.254.71.210:443

178.63.25.185:443

195.154.133.20:443

45.118.135.203:7080

81.0.236.90:443

107.182.225.142:8080

162.214.50.39:7080

50.116.54.215:443

203.114.109.124:443

45.118.115.99:8080

216.158.226.206:443

104.168.155.129:8080

110.232.117.186:8080

176.104.106.96:8080

eck1.plain
ecs1.plain

Targets

    • Target

      2ca6a641d567d699173736bdc9f3478b7678456fa12e42bd899f074e8e726ec9

    • Size

      527KB

    • MD5

      a9b0915039ac6716eafc99651d9ca0e3

    • SHA1

      af4fcc10d47e90150f0ce789f75bdb191a2cf243

    • SHA256

      2ca6a641d567d699173736bdc9f3478b7678456fa12e42bd899f074e8e726ec9

    • SHA512

      8988f8ba94c5978ceeffdde83667f697b8e1f38b31cfc31f274194128a269768530201a2039f57ad8ac732784a8e6361b5c1718b3f32792d54d7672dbc5e54b2

    • SSDEEP

      6144:GRQUWntghU/R+WtlgxTGZE7AeZ5V3Mi8oRifx/7/AOkcNlJ+jOUTWolWVS/NeCcS:OUtghUkiKiZkAeZ5V3doKy+iQVsV0/

MITRE ATT&CK Enterprise v15

Tasks