General

  • Target

    8af9b4de7e30ba481ecbc4539e639e00fbd34036a229137055bbc0200c363c5b

  • Size

    468KB

  • Sample

    241112-zfffxs1cnj

  • MD5

    2e0ae9d6a1cb7f3a36a38817dce1d834

  • SHA1

    bfe36bf088a64c53cbd5119ae70ce9c3142f4c4d

  • SHA256

    8af9b4de7e30ba481ecbc4539e639e00fbd34036a229137055bbc0200c363c5b

  • SHA512

    a039463abd424e863824b76cdf665dbd1b69aada063c65cea2bbe182e5acea28970d166bf0b5905eb44687dce096e044db58305fcf4f0f8378ccc9f5476147d6

  • SSDEEP

    6144:Rg5alZHCNqClhpALe+/LyK7AF0fY7S2KWCHMPzwO:65KCNqQ2a6b7NY7pKwz7

Malware Config

Extracted

Family

emotet

Botnet

Epoch2

C2

107.185.211.16:80

96.8.113.4:8080

153.126.210.205:7080

47.146.117.214:80

104.131.44.150:8080

169.239.182.217:8080

95.179.229.244:8080

209.182.216.177:443

209.141.54.221:8080

5.196.74.210:8080

72.12.127.184:443

104.131.11.150:443

200.55.243.138:8080

116.203.32.252:8080

142.105.151.124:443

81.2.235.111:8080

74.120.55.163:80

167.86.90.214:8080

87.106.139.101:8080

37.139.21.175:8080

rsa_pubkey.plain

Targets

    • Target

      8af9b4de7e30ba481ecbc4539e639e00fbd34036a229137055bbc0200c363c5b

    • Size

      468KB

    • MD5

      2e0ae9d6a1cb7f3a36a38817dce1d834

    • SHA1

      bfe36bf088a64c53cbd5119ae70ce9c3142f4c4d

    • SHA256

      8af9b4de7e30ba481ecbc4539e639e00fbd34036a229137055bbc0200c363c5b

    • SHA512

      a039463abd424e863824b76cdf665dbd1b69aada063c65cea2bbe182e5acea28970d166bf0b5905eb44687dce096e044db58305fcf4f0f8378ccc9f5476147d6

    • SSDEEP

      6144:Rg5alZHCNqClhpALe+/LyK7AF0fY7S2KWCHMPzwO:65KCNqQ2a6b7NY7pKwz7

MITRE ATT&CK Enterprise v15

Tasks