General

  • Target

    f68e05d2745f47a1c69669adb8c5a65461080e638d829366dfff068b36c93aa7

  • Size

    980KB

  • Sample

    241112-zfwsxazlcy

  • MD5

    118f2b02444cd76720ab67261ff3d284

  • SHA1

    6bd26f5f46ec063d36c1dcf17aeb04e800ab3cb4

  • SHA256

    f68e05d2745f47a1c69669adb8c5a65461080e638d829366dfff068b36c93aa7

  • SHA512

    687d568f3d0e689326f5b1b1ec1ea5a783f8fece3028bd7366d67701489155786375bb0478900fdc90aa4d9be1eb7d0df1e54f49adf9afeb202e2629fadbe8a8

  • SSDEEP

    12288:6WgHwLMoeYPdiZPIcMd+7FpSlbDoccR4QWmS:aZPIrdwsbEuQ

Malware Config

Extracted

Family

emotet

Botnet

Epoch1

C2

82.76.111.249:443

116.125.120.88:443

217.160.182.191:8080

189.1.185.98:8080

189.194.58.119:80

213.181.91.224:80

219.92.13.25:80

190.6.193.152:8080

61.92.159.208:8080

209.236.123.42:8080

12.162.84.2:8080

190.147.137.153:443

104.131.103.37:8080

212.231.60.98:80

202.62.39.111:80

82.240.207.95:443

170.81.48.2:80

177.74.228.34:80

82.196.15.205:8080

114.109.179.60:80

rsa_pubkey.plain

Targets

    • Target

      f68e05d2745f47a1c69669adb8c5a65461080e638d829366dfff068b36c93aa7

    • Size

      980KB

    • MD5

      118f2b02444cd76720ab67261ff3d284

    • SHA1

      6bd26f5f46ec063d36c1dcf17aeb04e800ab3cb4

    • SHA256

      f68e05d2745f47a1c69669adb8c5a65461080e638d829366dfff068b36c93aa7

    • SHA512

      687d568f3d0e689326f5b1b1ec1ea5a783f8fece3028bd7366d67701489155786375bb0478900fdc90aa4d9be1eb7d0df1e54f49adf9afeb202e2629fadbe8a8

    • SSDEEP

      12288:6WgHwLMoeYPdiZPIcMd+7FpSlbDoccR4QWmS:aZPIrdwsbEuQ

MITRE ATT&CK Enterprise v15

Tasks