General

  • Target

    6d85df7004e6bee0f87539e94e1c8ae6432ee1d5fa384b05e5edb7cc9877a07a

  • Size

    619KB

  • Sample

    241112-1gy54asamd

  • MD5

    67d298abc4cd04ff81719d9880eb3e39

  • SHA1

    f7d9943efd271fcebd10610a9a12f503bd7f076d

  • SHA256

    6d85df7004e6bee0f87539e94e1c8ae6432ee1d5fa384b05e5edb7cc9877a07a

  • SHA512

    73bcc253855c63a9e04fb1be13c73366a3ad0480f3887b08a65eca8be0a7eb0ac8e03f2427d1cf1ec4e177851213fabb7269f30f7c7b9610a3412d54a76c9864

  • SSDEEP

    12288:sUjZuoYh77pG4EPogTcvhQjMp4rtBJ/eofcDU/tjad:sBNhvp/XZ2MCJ/eo0ytad

Malware Config

Extracted

Family

emotet

Botnet

Epoch3

C2

194.166.147.143:80

188.226.165.170:8080

188.40.170.197:80

51.38.50.144:8080

85.75.49.113:80

103.229.73.17:8080

190.117.101.56:80

172.96.190.154:8080

223.17.215.76:80

5.2.246.108:80

190.85.46.52:7080

95.76.142.243:80

86.123.55.0:80

103.93.220.182:80

212.198.71.39:80

153.229.219.1:443

139.59.61.215:443

5.79.70.250:8080

190.192.39.136:80

178.33.167.120:8080

rsa_pubkey.plain

Targets

    • Target

      6d85df7004e6bee0f87539e94e1c8ae6432ee1d5fa384b05e5edb7cc9877a07a

    • Size

      619KB

    • MD5

      67d298abc4cd04ff81719d9880eb3e39

    • SHA1

      f7d9943efd271fcebd10610a9a12f503bd7f076d

    • SHA256

      6d85df7004e6bee0f87539e94e1c8ae6432ee1d5fa384b05e5edb7cc9877a07a

    • SHA512

      73bcc253855c63a9e04fb1be13c73366a3ad0480f3887b08a65eca8be0a7eb0ac8e03f2427d1cf1ec4e177851213fabb7269f30f7c7b9610a3412d54a76c9864

    • SSDEEP

      12288:sUjZuoYh77pG4EPogTcvhQjMp4rtBJ/eofcDU/tjad:sBNhvp/XZ2MCJ/eo0ytad

MITRE ATT&CK Enterprise v15

Tasks