General

  • Target

    4981e53fd1e18ae4f2f05ba0e25d203cf0730e34c74f6a0829ee92898263a01b

  • Size

    286KB

  • Sample

    241112-1l7b9ssbqj

  • MD5

    ed1e228f4dadd612b4eba42164ca1730

  • SHA1

    f8e82700b496b638cf67a23e663f0c52f61354b8

  • SHA256

    4981e53fd1e18ae4f2f05ba0e25d203cf0730e34c74f6a0829ee92898263a01b

  • SHA512

    cb3681c84618b7202e234d422ad2a8fdfcf2dc27e8164619137b0b5eb1be0002bc04a57544223b22835c657f5b25934912a3611126947fcdab4f99f50a608de1

  • SSDEEP

    6144:ueVPhVTZAWze4x3fZbgGcHTHjGYaEckMG76MJ:VOWze4xBbRHKcAHJ

Malware Config

Extracted

Family

emotet

Botnet

Epoch2

C2

74.120.55.163:80

176.10.250.88:8080

96.8.113.4:8080

137.59.187.107:8080

74.208.45.104:8080

104.131.11.150:443

110.145.77.103:80

87.106.136.232:8080

114.146.222.200:80

37.187.72.193:8080

181.230.116.163:80

70.167.215.250:8080

103.86.49.11:8080

201.173.217.124:443

109.74.5.95:8080

95.213.236.64:8080

5.39.91.110:7080

78.24.219.147:8080

81.2.235.111:8080

183.101.175.193:80

rsa_pubkey.plain

Targets

    • Target

      4981e53fd1e18ae4f2f05ba0e25d203cf0730e34c74f6a0829ee92898263a01b

    • Size

      286KB

    • MD5

      ed1e228f4dadd612b4eba42164ca1730

    • SHA1

      f8e82700b496b638cf67a23e663f0c52f61354b8

    • SHA256

      4981e53fd1e18ae4f2f05ba0e25d203cf0730e34c74f6a0829ee92898263a01b

    • SHA512

      cb3681c84618b7202e234d422ad2a8fdfcf2dc27e8164619137b0b5eb1be0002bc04a57544223b22835c657f5b25934912a3611126947fcdab4f99f50a608de1

    • SSDEEP

      6144:ueVPhVTZAWze4x3fZbgGcHTHjGYaEckMG76MJ:VOWze4xBbRHKcAHJ

MITRE ATT&CK Enterprise v15

Tasks