General

  • Target

    b39c8fe235e0210f9193376fd1da06a0685a8802cee49d0bd51eb0b89a4a13e9

  • Size

    896KB

  • Sample

    241112-1cx28ssall

  • MD5

    40f2f9da80329c1aa988b8af58a24c13

  • SHA1

    302a1820852b05877f2d095adffb2dae884acc0b

  • SHA256

    b39c8fe235e0210f9193376fd1da06a0685a8802cee49d0bd51eb0b89a4a13e9

  • SHA512

    fc883b2c72c05ccfeb28fdae31e5d6fe3be0f17223f8430b00fbbef7dab074c1c23b0d5a0bb73ab0c0ba7829a089dc08b0e81fffa278fe1b77afdedfa51df2e8

  • SSDEEP

    12288:uZlyqwEmkmauSVd2R3R0EcX0euXBzsWsU3z4ZuF:km6whk90BgyQ

Malware Config

Extracted

Family

emotet

Botnet

Epoch1

C2

174.100.27.229:80

209.126.6.222:8080

5.153.250.14:8080

192.241.146.84:8080

95.9.180.128:80

77.55.211.77:8080

85.105.140.135:443

45.33.77.42:8080

77.90.136.129:8080

94.176.234.118:443

190.163.31.26:80

190.6.193.152:8080

190.181.235.46:80

81.198.69.61:80

188.2.217.94:80

114.109.179.60:80

83.169.21.32:7080

137.74.106.111:7080

212.231.60.98:80

170.81.48.2:80

rsa_pubkey.plain

Targets

    • Target

      b39c8fe235e0210f9193376fd1da06a0685a8802cee49d0bd51eb0b89a4a13e9

    • Size

      896KB

    • MD5

      40f2f9da80329c1aa988b8af58a24c13

    • SHA1

      302a1820852b05877f2d095adffb2dae884acc0b

    • SHA256

      b39c8fe235e0210f9193376fd1da06a0685a8802cee49d0bd51eb0b89a4a13e9

    • SHA512

      fc883b2c72c05ccfeb28fdae31e5d6fe3be0f17223f8430b00fbbef7dab074c1c23b0d5a0bb73ab0c0ba7829a089dc08b0e81fffa278fe1b77afdedfa51df2e8

    • SSDEEP

      12288:uZlyqwEmkmauSVd2R3R0EcX0euXBzsWsU3z4ZuF:km6whk90BgyQ

MITRE ATT&CK Enterprise v15

Tasks