General

  • Target

    0010d34511fc198bce8b5ddd062b68b16232d8c7f6043f89c3287a9dcc679f36

  • Size

    577KB

  • Sample

    241112-zq6e4azncv

  • MD5

    19191b83257e05f69a4b77da7da966ba

  • SHA1

    67ebdd890928ad2bad057c4efeefc3c59d0637b3

  • SHA256

    0010d34511fc198bce8b5ddd062b68b16232d8c7f6043f89c3287a9dcc679f36

  • SHA512

    8a06b8ff062cda2ee145b860508f5e0545e5aac9e51dcdd3db7aa05e83e95dbbd12f8957dbe06f17ece1f4482ae93528af3501486a815aecb440415e1a314f68

  • SSDEEP

    12288:OdarWJIXriBtzwX+H+wYe6dFS7Zz5yJBUPENwPs:I/3BtzwuH+wYegFSaJiPEN

Malware Config

Extracted

Family

emotet

Botnet

Epoch1

C2

186.189.249.2:80

59.148.253.194:8080

173.212.197.71:8080

5.89.33.136:80

177.144.130.105:443

190.190.219.184:80

82.76.111.249:443

70.32.115.157:8080

62.84.75.50:80

190.24.243.186:80

51.15.7.145:80

24.232.228.233:80

46.105.114.137:8080

216.47.196.104:80

172.86.186.21:8080

186.103.141.250:443

128.92.203.42:80

190.188.245.242:80

152.169.22.67:80

170.81.48.2:80

rsa_pubkey.plain

Targets

    • Target

      0010d34511fc198bce8b5ddd062b68b16232d8c7f6043f89c3287a9dcc679f36

    • Size

      577KB

    • MD5

      19191b83257e05f69a4b77da7da966ba

    • SHA1

      67ebdd890928ad2bad057c4efeefc3c59d0637b3

    • SHA256

      0010d34511fc198bce8b5ddd062b68b16232d8c7f6043f89c3287a9dcc679f36

    • SHA512

      8a06b8ff062cda2ee145b860508f5e0545e5aac9e51dcdd3db7aa05e83e95dbbd12f8957dbe06f17ece1f4482ae93528af3501486a815aecb440415e1a314f68

    • SSDEEP

      12288:OdarWJIXriBtzwX+H+wYe6dFS7Zz5yJBUPENwPs:I/3BtzwuH+wYegFSaJiPEN

MITRE ATT&CK Enterprise v15

Tasks