General

  • Target

    3f6f4e8c2423243f7e77661e8c27e528a911fefe292810ae5140f8050860578e

  • Size

    628KB

  • Sample

    241112-zjv1sazlhw

  • MD5

    05b9d706842881aa75ae00e86cb61377

  • SHA1

    2da7f61f811deb908e5c58c1192d7ffa84aa4d88

  • SHA256

    3f6f4e8c2423243f7e77661e8c27e528a911fefe292810ae5140f8050860578e

  • SHA512

    ccd895d1570a3dab7fb6b55f21078266134a54b0975ce02cec6a2d78fae02b00410d4e7d4a158995b258c5682ae9e6a91e2c178d796a1129edb76054f499f9a2

  • SSDEEP

    6144:p5FdA9+3bkRQIwYEgRy2k46fifqlhyBQLzaWSb3nxyhXf:pvdA9SGh9rBylQB4atDnxs

Malware Config

Extracted

Family

emotet

Botnet

Epoch1

C2

144.139.91.187:443

157.7.199.53:8080

189.218.165.63:80

104.236.161.64:8080

2.47.112.152:80

185.94.252.27:443

202.62.39.111:80

190.17.195.202:80

143.0.87.101:80

70.32.84.74:8080

45.161.242.102:80

190.194.242.254:443

50.28.51.143:8080

204.225.249.100:7080

137.74.106.111:7080

68.183.170.114:8080

181.31.211.181:80

149.62.173.247:8080

177.75.143.112:443

190.229.148.144:80

rsa_pubkey.plain

Targets

    • Target

      3f6f4e8c2423243f7e77661e8c27e528a911fefe292810ae5140f8050860578e

    • Size

      628KB

    • MD5

      05b9d706842881aa75ae00e86cb61377

    • SHA1

      2da7f61f811deb908e5c58c1192d7ffa84aa4d88

    • SHA256

      3f6f4e8c2423243f7e77661e8c27e528a911fefe292810ae5140f8050860578e

    • SHA512

      ccd895d1570a3dab7fb6b55f21078266134a54b0975ce02cec6a2d78fae02b00410d4e7d4a158995b258c5682ae9e6a91e2c178d796a1129edb76054f499f9a2

    • SSDEEP

      6144:p5FdA9+3bkRQIwYEgRy2k46fifqlhyBQLzaWSb3nxyhXf:pvdA9SGh9rBylQB4atDnxs

MITRE ATT&CK Enterprise v15

Tasks