General

  • Target

    7d1bfd2236e7f6235076cceebb8d3dcede6629fc64cd4a55423a74b62b6f20e9

  • Size

    442KB

  • Sample

    241112-1k1hbsvpan

  • MD5

    fbb5dbbb3c6163b4a2d45f67c6e729f2

  • SHA1

    4d967d511e07bc31dc1aede81fb2b38a9041a7df

  • SHA256

    7d1bfd2236e7f6235076cceebb8d3dcede6629fc64cd4a55423a74b62b6f20e9

  • SHA512

    9145ee779233cf9cc3be9fdc505467db52afbc08b89f0e33bd03ae0f6d9a8b01e1e34b92a92d7fd54089750522a1b64cdd086c147e3860b3de53042122ba5906

  • SSDEEP

    6144:n+dpGq8TFgfNlLIMCTC5aoZiHyfhEP15IWaM8Rah8pBk4JrQ/OqlLr+XL5e7fLvX:npgfzLmTC53ZEPYpahGNrSZlLNLQ

Malware Config

Extracted

Family

emotet

Botnet

Epoch3

C2

73.100.19.104:80

103.3.63.137:8080

188.166.220.180:7080

192.175.111.217:7080

91.83.93.103:443

94.212.52.40:80

190.191.171.72:80

24.231.51.190:80

113.161.148.81:80

46.105.131.68:8080

223.17.215.76:80

45.239.204.100:80

185.80.172.199:80

91.75.75.46:80

190.151.5.131:443

60.125.114.64:443

77.74.78.80:443

175.103.38.146:80

58.27.215.3:8080

91.213.106.100:8080

rsa_pubkey.plain

Targets

    • Target

      7d1bfd2236e7f6235076cceebb8d3dcede6629fc64cd4a55423a74b62b6f20e9

    • Size

      442KB

    • MD5

      fbb5dbbb3c6163b4a2d45f67c6e729f2

    • SHA1

      4d967d511e07bc31dc1aede81fb2b38a9041a7df

    • SHA256

      7d1bfd2236e7f6235076cceebb8d3dcede6629fc64cd4a55423a74b62b6f20e9

    • SHA512

      9145ee779233cf9cc3be9fdc505467db52afbc08b89f0e33bd03ae0f6d9a8b01e1e34b92a92d7fd54089750522a1b64cdd086c147e3860b3de53042122ba5906

    • SSDEEP

      6144:n+dpGq8TFgfNlLIMCTC5aoZiHyfhEP15IWaM8Rah8pBk4JrQ/OqlLr+XL5e7fLvX:npgfzLmTC53ZEPYpahGNrSZlLNLQ

MITRE ATT&CK Enterprise v15

Tasks