General

  • Target

    80a31a85121b45037a99762e441221f13036803ada8c5ad11933d9557c1c68ce

  • Size

    504KB

  • Sample

    241112-1ccfjavmgm

  • MD5

    7aa63d0f1f0802b0d94b4cdb74857f9e

  • SHA1

    40aa9e0087ffffeb31874d2d6857fda11c11417e

  • SHA256

    80a31a85121b45037a99762e441221f13036803ada8c5ad11933d9557c1c68ce

  • SHA512

    baf83d3c4d39749087caaf2dafe756a0cee23f66d644b1c32c0768a2ef05a253ad2356aabbebe38420e46a85dbcd2d9aa59b85e448f8873509117b35d6f088a5

  • SSDEEP

    6144:PUDnBbfgYDPtXdQVksf10PX21oBkYnaeldx2RQliOATJEP/VEEhOSgpypDrTXyae:WnXttQ+Je1oBSYxiQSEP/VEEtgWXW

Malware Config

Extracted

Family

emotet

Botnet

Epoch1

C2

186.189.249.2:80

59.148.253.194:8080

173.212.197.71:8080

5.89.33.136:80

177.144.130.105:443

190.190.219.184:80

82.76.111.249:443

70.32.115.157:8080

62.84.75.50:80

190.24.243.186:80

51.15.7.145:80

24.232.228.233:80

46.105.114.137:8080

216.47.196.104:80

172.86.186.21:8080

186.103.141.250:443

128.92.203.42:80

190.188.245.242:80

152.169.22.67:80

170.81.48.2:80

rsa_pubkey.plain

Targets

    • Target

      80a31a85121b45037a99762e441221f13036803ada8c5ad11933d9557c1c68ce

    • Size

      504KB

    • MD5

      7aa63d0f1f0802b0d94b4cdb74857f9e

    • SHA1

      40aa9e0087ffffeb31874d2d6857fda11c11417e

    • SHA256

      80a31a85121b45037a99762e441221f13036803ada8c5ad11933d9557c1c68ce

    • SHA512

      baf83d3c4d39749087caaf2dafe756a0cee23f66d644b1c32c0768a2ef05a253ad2356aabbebe38420e46a85dbcd2d9aa59b85e448f8873509117b35d6f088a5

    • SSDEEP

      6144:PUDnBbfgYDPtXdQVksf10PX21oBkYnaeldx2RQliOATJEP/VEEhOSgpypDrTXyae:WnXttQ+Je1oBSYxiQSEP/VEEtgWXW

MITRE ATT&CK Enterprise v15

Tasks