General

  • Target

    4713325c0637d8c7319037178e7944f5470142912fa40f967cdd1165e73b981f

  • Size

    980KB

  • Sample

    241112-1gv4fa1kdx

  • MD5

    edaa1bf88019651740b2fbbcc49ba17d

  • SHA1

    9f55a3dea8768d828b33929ff30ebb183c5b76e6

  • SHA256

    4713325c0637d8c7319037178e7944f5470142912fa40f967cdd1165e73b981f

  • SHA512

    e15e938e4fc9a18c8fa9288e59f5f62a3b6d9ef0a5fd72fc4919f7e73a8e374642260efe1ae22b6ee97d73fe193b6b878343f88665199951df00d376fca17b24

  • SSDEEP

    12288:1WgHwLMoeYPdiZPIcMd+7FpSlbDoccz4QkNmS:pZPIrdwsbEsQ

Malware Config

Extracted

Family

emotet

Botnet

Epoch2

C2

47.146.32.175:80

212.51.142.238:8080

200.55.243.138:8080

114.146.222.200:80

153.126.210.205:7080

121.124.124.40:7080

222.214.218.37:4143

67.241.24.163:8080

180.92.239.110:8080

203.153.216.189:7080

119.198.40.179:80

70.167.215.250:8080

168.235.67.138:7080

190.55.181.54:443

139.59.60.244:8080

189.212.199.126:443

78.24.219.147:8080

61.19.246.238:443

137.59.187.107:8080

87.106.139.101:8080

rsa_pubkey.plain

Targets

    • Target

      4713325c0637d8c7319037178e7944f5470142912fa40f967cdd1165e73b981f

    • Size

      980KB

    • MD5

      edaa1bf88019651740b2fbbcc49ba17d

    • SHA1

      9f55a3dea8768d828b33929ff30ebb183c5b76e6

    • SHA256

      4713325c0637d8c7319037178e7944f5470142912fa40f967cdd1165e73b981f

    • SHA512

      e15e938e4fc9a18c8fa9288e59f5f62a3b6d9ef0a5fd72fc4919f7e73a8e374642260efe1ae22b6ee97d73fe193b6b878343f88665199951df00d376fca17b24

    • SSDEEP

      12288:1WgHwLMoeYPdiZPIcMd+7FpSlbDoccz4QkNmS:pZPIrdwsbEsQ

MITRE ATT&CK Enterprise v15

Tasks