General

  • Target

    bffa55b7c889b55a57736c1a95dfb9c66f1a1fcd8958b8dfff514c4648e5ca7c

  • Size

    970KB

  • Sample

    241112-1caxpsvmgk

  • MD5

    9caa6509f55256cd78782389c411e060

  • SHA1

    a4a15ee9e960e9ed17a293093b39fbbff8251756

  • SHA256

    bffa55b7c889b55a57736c1a95dfb9c66f1a1fcd8958b8dfff514c4648e5ca7c

  • SHA512

    9b6329bdd368c19fc484fe0280937f261df247b85bc0e049644d8cbf15d973ae66794bbad86adf4e18e4369e462e9daad87836629050aa93c2d70898cb5df439

  • SSDEEP

    12288:Rdq2982XqwpszV8ski5NeT0sjVZWtYz2QghDmvQhmHo9LWlNsOY8UuH:RQ291fLski5N6ZWyz2QglbmHo9LGpZ

Malware Config

Extracted

Family

emotet

Botnet

Epoch3

C2

187.64.128.197:80

198.57.203.63:8080

163.172.107.70:8080

212.112.113.235:80

157.7.164.178:8081

181.167.35.84:80

212.156.133.218:80

185.142.236.163:443

181.143.101.19:8080

75.127.14.170:8080

115.165.3.213:80

190.55.233.156:80

139.59.12.63:8080

144.139.91.187:80

37.70.131.107:80

181.113.229.139:443

41.185.29.128:8080

177.37.81.212:443

5.79.70.250:8080

78.188.170.128:80

rsa_pubkey.plain

Targets

    • Target

      bffa55b7c889b55a57736c1a95dfb9c66f1a1fcd8958b8dfff514c4648e5ca7c

    • Size

      970KB

    • MD5

      9caa6509f55256cd78782389c411e060

    • SHA1

      a4a15ee9e960e9ed17a293093b39fbbff8251756

    • SHA256

      bffa55b7c889b55a57736c1a95dfb9c66f1a1fcd8958b8dfff514c4648e5ca7c

    • SHA512

      9b6329bdd368c19fc484fe0280937f261df247b85bc0e049644d8cbf15d973ae66794bbad86adf4e18e4369e462e9daad87836629050aa93c2d70898cb5df439

    • SSDEEP

      12288:Rdq2982XqwpszV8ski5NeT0sjVZWtYz2QghDmvQhmHo9LWlNsOY8UuH:RQ291fLski5N6ZWyz2QglbmHo9LGpZ

MITRE ATT&CK Enterprise v15

Tasks