General

  • Target

    7d8b1091009d8e963c5b7c9384330ab7b12234099ed3079166733ae6e3fcd528

  • Size

    372KB

  • Sample

    241112-1fqsbssapr

  • MD5

    0401a19c33c1a994fc1399fc0b055bcd

  • SHA1

    78a5608fb59394e8fdcc563e5410aa26b894752a

  • SHA256

    7d8b1091009d8e963c5b7c9384330ab7b12234099ed3079166733ae6e3fcd528

  • SHA512

    bbe5309fc42f18e23e073bfaf017a5eb3510da0f76b69d936495934a175c3313a276fda71308faf68c9423a4a5c7f1c207fefcf5147537e113dd66a27e2678b0

  • SSDEEP

    6144:iqpqdUS0u6jJ6KfkWdjCuv4ZVmeg755iLNVfhR7T2H:iqp8US0HFXfRBDmLNVfhk

Malware Config

Extracted

Family

emotet

Botnet

Epoch2

C2

142.105.151.124:443

62.108.54.22:8080

212.51.142.238:8080

71.208.216.10:80

108.48.41.69:80

83.110.223.58:443

210.165.156.91:80

104.131.44.150:8080

104.236.246.93:8080

5.39.91.110:7080

209.141.54.221:8080

209.182.216.177:443

153.126.210.205:7080

91.211.88.52:7080

180.92.239.110:8080

183.101.175.193:80

162.241.92.219:8080

87.106.139.101:8080

114.146.222.200:80

65.111.120.223:80

rsa_pubkey.plain

Targets

    • Target

      7d8b1091009d8e963c5b7c9384330ab7b12234099ed3079166733ae6e3fcd528

    • Size

      372KB

    • MD5

      0401a19c33c1a994fc1399fc0b055bcd

    • SHA1

      78a5608fb59394e8fdcc563e5410aa26b894752a

    • SHA256

      7d8b1091009d8e963c5b7c9384330ab7b12234099ed3079166733ae6e3fcd528

    • SHA512

      bbe5309fc42f18e23e073bfaf017a5eb3510da0f76b69d936495934a175c3313a276fda71308faf68c9423a4a5c7f1c207fefcf5147537e113dd66a27e2678b0

    • SSDEEP

      6144:iqpqdUS0u6jJ6KfkWdjCuv4ZVmeg755iLNVfhR7T2H:iqp8US0HFXfRBDmLNVfhk

MITRE ATT&CK Enterprise v15

Tasks