General

  • Target

    3899e260282b4e8f050d44f4d577b7ae1af851f06fbaebfe4790f1f8a4c2d955

  • Size

    268KB

  • Sample

    241112-zghmnszlet

  • MD5

    8d5b1e96fadad6ecac0e0146e1232c2c

  • SHA1

    321d98ba8123eac7de62332511f7ea149cd17bd9

  • SHA256

    3899e260282b4e8f050d44f4d577b7ae1af851f06fbaebfe4790f1f8a4c2d955

  • SHA512

    40213b148d888c47288beaa9d0cab6ee006ceda1159b590cd116e1376882fb4f5120b5184f3245d41a59b43072e01c9bb605cc093ea1cdb5ac13f84e9482c109

  • SSDEEP

    6144:EXJyo1drrkvxxxkxxxkxxxkxxxxkxxxkxxx4u3M6oNh:Ed1d3Qxxxkxxxkxxxkxxxxkxxxkxxx4h

Malware Config

Extracted

Family

emotet

Botnet

Epoch3

C2

173.94.215.84:80

85.25.207.108:8080

178.128.14.92:8080

60.125.114.64:443

181.126.54.234:80

157.7.164.178:8081

95.216.205.155:8080

216.75.37.196:8080

179.62.238.49:80

71.57.180.213:80

172.96.190.154:8080

112.78.142.170:80

178.238.232.46:443

177.144.130.105:443

105.209.235.113:8080

46.105.131.68:8080

185.86.148.68:443

143.95.101.72:8080

75.127.14.170:8080

168.0.97.6:80

rsa_pubkey.plain

Targets

    • Target

      3899e260282b4e8f050d44f4d577b7ae1af851f06fbaebfe4790f1f8a4c2d955

    • Size

      268KB

    • MD5

      8d5b1e96fadad6ecac0e0146e1232c2c

    • SHA1

      321d98ba8123eac7de62332511f7ea149cd17bd9

    • SHA256

      3899e260282b4e8f050d44f4d577b7ae1af851f06fbaebfe4790f1f8a4c2d955

    • SHA512

      40213b148d888c47288beaa9d0cab6ee006ceda1159b590cd116e1376882fb4f5120b5184f3245d41a59b43072e01c9bb605cc093ea1cdb5ac13f84e9482c109

    • SSDEEP

      6144:EXJyo1drrkvxxxkxxxkxxxkxxxxkxxxkxxx4u3M6oNh:Ed1d3Qxxxkxxxkxxxkxxxxkxxxkxxx4h

MITRE ATT&CK Enterprise v15

Tasks