General

  • Target

    88a1059475c8bda273edf227bfb67a32472cd49eb350b879db232fa91563493c

  • Size

    60KB

  • Sample

    241112-1k92rssbka

  • MD5

    40e8dbf7b88a2dedb6de42509640e9d2

  • SHA1

    7d8fddcde0e5d9c4ce8ebea0fcaf56802f587e4f

  • SHA256

    88a1059475c8bda273edf227bfb67a32472cd49eb350b879db232fa91563493c

  • SHA512

    802d327b70f7aaa641aa02a15f5436e33e31a62aaef56b403461ce1499ab9b37d7130612ca073826e62f886766f14f0c81d717e16162d79b0cc9fe0dca4c2312

  • SSDEEP

    768:LoEgbXnp5TK0LR8n4oWPjy5fHWF43z0f4Gu4hX4JjRI0ny6Rq/Ab2a5iuLK0OkI7:n0LOjAezBaXAjmd1aMuLi/cPyXlC

Malware Config

Extracted

Family

emotet

Botnet

Epoch3

C2

92.24.51.238:80

139.99.157.213:8080

188.166.25.84:8080

81.214.253.80:443

5.79.70.250:8080

41.185.29.128:8080

181.164.110.7:80

177.37.81.212:443

203.153.216.178:7080

178.33.167.120:8080

77.74.78.80:443

37.70.131.107:80

190.164.75.175:80

75.127.14.170:8080

78.188.170.128:80

113.161.148.81:80

105.209.235.113:8080

177.144.130.105:443

81.17.93.134:80

181.134.9.162:80

rsa_pubkey.plain

Targets

    • Target

      88a1059475c8bda273edf227bfb67a32472cd49eb350b879db232fa91563493c

    • Size

      60KB

    • MD5

      40e8dbf7b88a2dedb6de42509640e9d2

    • SHA1

      7d8fddcde0e5d9c4ce8ebea0fcaf56802f587e4f

    • SHA256

      88a1059475c8bda273edf227bfb67a32472cd49eb350b879db232fa91563493c

    • SHA512

      802d327b70f7aaa641aa02a15f5436e33e31a62aaef56b403461ce1499ab9b37d7130612ca073826e62f886766f14f0c81d717e16162d79b0cc9fe0dca4c2312

    • SSDEEP

      768:LoEgbXnp5TK0LR8n4oWPjy5fHWF43z0f4Gu4hX4JjRI0ny6Rq/Ab2a5iuLK0OkI7:n0LOjAezBaXAjmd1aMuLi/cPyXlC

MITRE ATT&CK Enterprise v15

Tasks