General

  • Target

    5c6a249b844355fae74b504b8881b5ad7d99d9680b22e15cbf999764e0d46bb8

  • Size

    617KB

  • Sample

    241112-1n7e2svpfj

  • MD5

    9489a34b0da99f65238b33d72e5adf6a

  • SHA1

    c3d2b4735b6b36dac9a1a5a67744952de624cd9a

  • SHA256

    5c6a249b844355fae74b504b8881b5ad7d99d9680b22e15cbf999764e0d46bb8

  • SHA512

    1ff8ea086841fda6b9694b8872bcd386abf309ce346cf5cbbc51cef6e352cbe508e3e4f69c7d77e12578ff51da219430a0209cdb07412016329c2bbbd98ff04c

  • SSDEEP

    12288:qXTEnejfEqrrSTw1ww2Yo0MCx1HXqxklNG6cyp2jVBRAwvEP+8/H:gIgfT2sO6t3HXqeGXjbG

Malware Config

Extracted

Family

emotet

Botnet

Epoch1

C2

207.144.103.227:80

94.76.247.61:8080

213.176.36.147:8080

186.103.141.250:443

82.76.111.249:443

172.104.169.32:8080

91.222.77.105:80

185.94.252.27:443

213.60.96.117:80

177.73.0.98:443

58.171.153.81:80

77.55.211.77:8080

143.0.87.101:80

170.81.48.2:80

80.249.176.206:80

114.109.179.60:80

82.196.15.205:8080

73.116.193.136:80

192.241.146.84:8080

5.196.35.138:7080

rsa_pubkey.plain

Targets

    • Target

      5c6a249b844355fae74b504b8881b5ad7d99d9680b22e15cbf999764e0d46bb8

    • Size

      617KB

    • MD5

      9489a34b0da99f65238b33d72e5adf6a

    • SHA1

      c3d2b4735b6b36dac9a1a5a67744952de624cd9a

    • SHA256

      5c6a249b844355fae74b504b8881b5ad7d99d9680b22e15cbf999764e0d46bb8

    • SHA512

      1ff8ea086841fda6b9694b8872bcd386abf309ce346cf5cbbc51cef6e352cbe508e3e4f69c7d77e12578ff51da219430a0209cdb07412016329c2bbbd98ff04c

    • SSDEEP

      12288:qXTEnejfEqrrSTw1ww2Yo0MCx1HXqxklNG6cyp2jVBRAwvEP+8/H:gIgfT2sO6t3HXqeGXjbG

MITRE ATT&CK Enterprise v15

Tasks