General

  • Target

    2bc1a956c0ef9f4db7d590334871f7bc6c35187aba433439f32970bdbb60addf

  • Size

    188KB

  • Sample

    241112-zrqe9s1epq

  • MD5

    f63544002c131f991b3b2efeeb098a2c

  • SHA1

    b6823827cebcd53ed26511e7dd1ad09018e65e65

  • SHA256

    2bc1a956c0ef9f4db7d590334871f7bc6c35187aba433439f32970bdbb60addf

  • SHA512

    456b51126814cd393aaca464a544d72993fd96b4a89c99ee9e9dcc8424f8bf890d0a34a5e654b2bd70397e0595b43cd97b61beb5544870519a0c1b7f64958e22

  • SSDEEP

    1536:uOwR2ZIZJZe7+l4AAkdXUJaYdt7ADBpBWkSlC5XIGA/3x09zn:uOwR2ZSJo6+A3U04UDBGY54r/q9zn

Malware Config

Extracted

Family

emotet

Botnet

Epoch2

C2

74.120.55.163:80

176.10.250.88:8080

96.8.113.4:8080

137.59.187.107:8080

74.208.45.104:8080

104.131.11.150:443

110.145.77.103:80

87.106.136.232:8080

114.146.222.200:80

37.187.72.193:8080

181.230.116.163:80

70.167.215.250:8080

103.86.49.11:8080

201.173.217.124:443

109.74.5.95:8080

95.213.236.64:8080

5.39.91.110:7080

78.24.219.147:8080

81.2.235.111:8080

183.101.175.193:80

rsa_pubkey.plain

Targets

    • Target

      2bc1a956c0ef9f4db7d590334871f7bc6c35187aba433439f32970bdbb60addf

    • Size

      188KB

    • MD5

      f63544002c131f991b3b2efeeb098a2c

    • SHA1

      b6823827cebcd53ed26511e7dd1ad09018e65e65

    • SHA256

      2bc1a956c0ef9f4db7d590334871f7bc6c35187aba433439f32970bdbb60addf

    • SHA512

      456b51126814cd393aaca464a544d72993fd96b4a89c99ee9e9dcc8424f8bf890d0a34a5e654b2bd70397e0595b43cd97b61beb5544870519a0c1b7f64958e22

    • SSDEEP

      1536:uOwR2ZIZJZe7+l4AAkdXUJaYdt7ADBpBWkSlC5XIGA/3x09zn:uOwR2ZSJo6+A3U04UDBGY54r/q9zn

MITRE ATT&CK Enterprise v15

Tasks