General

  • Target

    b7b06a641583dcdeecb952a9cb55f062a1b45dc407e98ce64521d3f0a7946dab

  • Size

    617KB

  • Sample

    241112-1ckf5s1hne

  • MD5

    176039d9d0aee009c7cd8df210d96581

  • SHA1

    74b2a59aeca5cf0784dc0af85adb26b77186588f

  • SHA256

    b7b06a641583dcdeecb952a9cb55f062a1b45dc407e98ce64521d3f0a7946dab

  • SHA512

    e6c9927a730e13ff48ea9d97e51fab328ff42cd0f502f73bb628e3eab74aef175de0ef98c18b15ba76f224d79040533660816f8c8a2eb59e36009b7bf1a05db6

  • SSDEEP

    12288:MXTEnejfEqrrSTw1ww2Yo0MCx1HXqxklNG6cypEjV8RAwvEP+wwl:yIgfT2sO6t3HXqeG9j86w

Malware Config

Extracted

Family

emotet

Botnet

Epoch2

C2

24.233.112.152:80

69.30.203.214:8080

192.210.135.126:8080

47.144.21.12:443

157.245.99.39:8080

119.198.40.179:80

62.75.141.82:80

181.211.11.242:80

167.86.90.214:8080

95.213.236.64:8080

87.106.139.101:8080

109.74.5.95:8080

142.105.151.124:443

47.146.117.214:80

185.94.252.104:443

2.58.16.85:7080

222.214.218.37:4143

85.105.205.77:8080

190.160.53.126:80

107.185.211.16:80

rsa_pubkey.plain

Targets

    • Target

      b7b06a641583dcdeecb952a9cb55f062a1b45dc407e98ce64521d3f0a7946dab

    • Size

      617KB

    • MD5

      176039d9d0aee009c7cd8df210d96581

    • SHA1

      74b2a59aeca5cf0784dc0af85adb26b77186588f

    • SHA256

      b7b06a641583dcdeecb952a9cb55f062a1b45dc407e98ce64521d3f0a7946dab

    • SHA512

      e6c9927a730e13ff48ea9d97e51fab328ff42cd0f502f73bb628e3eab74aef175de0ef98c18b15ba76f224d79040533660816f8c8a2eb59e36009b7bf1a05db6

    • SSDEEP

      12288:MXTEnejfEqrrSTw1ww2Yo0MCx1HXqxklNG6cypEjV8RAwvEP+wwl:yIgfT2sO6t3HXqeG9j86w

MITRE ATT&CK Enterprise v15

Tasks