General

  • Target

    83310b18814194e9a10a8cf60066ca429a0023f3dd211b370bfc5838d775e995

  • Size

    493KB

  • Sample

    241112-1fkajsvndj

  • MD5

    e41f8e3f157db57d5e64937a00a12d19

  • SHA1

    80120baa8857dfdd97a26d279ed6f8b8828c40e9

  • SHA256

    83310b18814194e9a10a8cf60066ca429a0023f3dd211b370bfc5838d775e995

  • SHA512

    c4bf5bb73ee582128c6f070d4df8e397e8afb2c47c7c03d24fd3e29e145f80ef5dc3b3aebf6e05fcac8ffb6b0186613b0d91cc6b8585715b633292af849f8ef5

  • SSDEEP

    12288:GX21LCAEra89Ya9Fxdu56zMkqSB6izxlp:GG5CAnKYa946Hqi6iFlp

Malware Config

Extracted

Family

emotet

Botnet

Epoch1

C2

24.249.135.121:80

185.94.252.13:443

149.62.173.247:8080

50.28.51.143:8080

80.249.176.206:80

5.196.35.138:7080

190.17.195.202:80

143.0.87.101:80

190.147.137.153:443

181.30.69.50:80

51.255.165.160:8080

190.96.118.251:443

72.47.248.48:7080

178.79.163.131:8080

212.231.60.98:80

187.162.248.237:80

2.47.112.152:80

68.183.190.199:8080

192.241.143.52:8080

77.55.211.77:8080

rsa_pubkey.plain

Targets

    • Target

      83310b18814194e9a10a8cf60066ca429a0023f3dd211b370bfc5838d775e995

    • Size

      493KB

    • MD5

      e41f8e3f157db57d5e64937a00a12d19

    • SHA1

      80120baa8857dfdd97a26d279ed6f8b8828c40e9

    • SHA256

      83310b18814194e9a10a8cf60066ca429a0023f3dd211b370bfc5838d775e995

    • SHA512

      c4bf5bb73ee582128c6f070d4df8e397e8afb2c47c7c03d24fd3e29e145f80ef5dc3b3aebf6e05fcac8ffb6b0186613b0d91cc6b8585715b633292af849f8ef5

    • SSDEEP

      12288:GX21LCAEra89Ya9Fxdu56zMkqSB6izxlp:GG5CAnKYa946Hqi6iFlp

MITRE ATT&CK Enterprise v15

Tasks