General

  • Target

    241aefe06bee6597bfa5d323c5bb4c314ea587c0a85ff62bdacd8d2e82a2edab

  • Size

    442KB

  • Sample

    241112-1m6r5asbrn

  • MD5

    e6731b1d9bc4531d3de176499bc0fd69

  • SHA1

    f9a2c58d5c4a957e34deb0160321fa5f4f2d0423

  • SHA256

    241aefe06bee6597bfa5d323c5bb4c314ea587c0a85ff62bdacd8d2e82a2edab

  • SHA512

    b945b9d5d588410fef3b15f28357ebd5ebd98fe6f97d7f967347e026a53bcf8daea99daebbae536af49f44978ec932e498b22594ac719b9f16caab50f25bcbd8

  • SSDEEP

    6144:aRcVGq8TkBsx1PMRBFC5EpiwypyEP6e2rvX6gJiYfUD1ZCDzPAuQyUr8iac5Qh:aWBsfM3C5WEPOOgP8Dqz1QyUrdFQ

Malware Config

Extracted

Family

emotet

Botnet

Epoch1

C2

190.96.15.50:80

192.175.111.214:8080

95.85.33.23:8080

192.232.229.54:7080

200.127.14.97:80

190.188.245.242:80

51.15.7.145:80

138.97.60.140:8080

98.13.75.196:80

213.52.74.198:80

74.58.215.226:80

192.81.38.31:80

191.182.6.118:80

212.71.237.140:8080

209.236.123.42:8080

60.93.23.51:80

178.211.45.66:8080

190.24.243.186:80

62.84.75.50:80

50.121.220.50:80

rsa_pubkey.plain

Targets

    • Target

      241aefe06bee6597bfa5d323c5bb4c314ea587c0a85ff62bdacd8d2e82a2edab

    • Size

      442KB

    • MD5

      e6731b1d9bc4531d3de176499bc0fd69

    • SHA1

      f9a2c58d5c4a957e34deb0160321fa5f4f2d0423

    • SHA256

      241aefe06bee6597bfa5d323c5bb4c314ea587c0a85ff62bdacd8d2e82a2edab

    • SHA512

      b945b9d5d588410fef3b15f28357ebd5ebd98fe6f97d7f967347e026a53bcf8daea99daebbae536af49f44978ec932e498b22594ac719b9f16caab50f25bcbd8

    • SSDEEP

      6144:aRcVGq8TkBsx1PMRBFC5EpiwypyEP6e2rvX6gJiYfUD1ZCDzPAuQyUr8iac5Qh:aWBsfM3C5WEPOOgP8Dqz1QyUrdFQ

MITRE ATT&CK Enterprise v15

Tasks