General

  • Target

    49e50bda9140796c45237c5be909d8feced3e3b6cd395f4fd3607db645827e4e

  • Size

    923KB

  • Sample

    241112-zj71cazmat

  • MD5

    4427799e3c6ae39b5a9f8528d1f46253

  • SHA1

    cb8b9ff94981155ba931ba5296646d580f4b4e85

  • SHA256

    49e50bda9140796c45237c5be909d8feced3e3b6cd395f4fd3607db645827e4e

  • SHA512

    60769b73dcff93acceb31c6ac92af39b4547fdf745d65afb064b955e8ef4eed6f832bc2d7d459e78467067cb7a3fe5ee37195da41f68e5ebd1dc05eecadb451b

  • SSDEEP

    12288:qMlCHIWMOZkzNxP+KngRYq3Ocs5PFCJbjhK+pfzf0Lvmq:lCpZkiKngRYbcUYXhK+pfzsL3

Malware Config

Extracted

Family

emotet

Botnet

Epoch3

C2

187.64.128.197:80

198.57.203.63:8080

163.172.107.70:8080

212.112.113.235:80

157.7.164.178:8081

181.167.35.84:80

212.156.133.218:80

185.142.236.163:443

181.143.101.19:8080

75.127.14.170:8080

115.165.3.213:80

190.55.233.156:80

139.59.12.63:8080

144.139.91.187:80

37.70.131.107:80

181.113.229.139:443

41.185.29.128:8080

177.37.81.212:443

5.79.70.250:8080

78.188.170.128:80

rsa_pubkey.plain

Targets

    • Target

      49e50bda9140796c45237c5be909d8feced3e3b6cd395f4fd3607db645827e4e

    • Size

      923KB

    • MD5

      4427799e3c6ae39b5a9f8528d1f46253

    • SHA1

      cb8b9ff94981155ba931ba5296646d580f4b4e85

    • SHA256

      49e50bda9140796c45237c5be909d8feced3e3b6cd395f4fd3607db645827e4e

    • SHA512

      60769b73dcff93acceb31c6ac92af39b4547fdf745d65afb064b955e8ef4eed6f832bc2d7d459e78467067cb7a3fe5ee37195da41f68e5ebd1dc05eecadb451b

    • SSDEEP

      12288:qMlCHIWMOZkzNxP+KngRYq3Ocs5PFCJbjhK+pfzf0Lvmq:lCpZkiKngRYbcUYXhK+pfzsL3

MITRE ATT&CK Enterprise v15

Tasks