General

  • Target

    6a5b4b0b2bad4dfc77a29c16deba595f180d01c9f4b8bc02fb1acccef87376fe

  • Size

    363KB

  • Sample

    241112-zrs66atrhj

  • MD5

    739ff0ae423314af2b9232945a4b41aa

  • SHA1

    51e539837c31a75c9942d44fc2151214402b8137

  • SHA256

    6a5b4b0b2bad4dfc77a29c16deba595f180d01c9f4b8bc02fb1acccef87376fe

  • SHA512

    e0fa1101665c5587f25f731c634480ae72e13039707bb6e9ab9ea22eed2917eef2604ee1b973d4a012302a969f6e01f60b1415abfcc73b63992ec0b06af3479a

  • SSDEEP

    6144:9d6cOQxFhNAup/iZXANH9KOhntU1JJatRvgdZ6C5a0tFtTT2:9Qup6Zs7M1mOr5a0ftTT

Malware Config

Extracted

Family

emotet

Botnet

Epoch3

C2

186.109.104.67:80

185.86.148.68:443

139.99.157.213:8080

203.153.216.178:7080

192.163.221.191:8080

201.235.10.215:80

37.46.129.215:8080

78.189.60.109:443

77.74.78.80:443

143.95.101.72:8080

188.251.213.180:443

31.146.61.34:80

190.53.144.120:80

105.209.235.113:8080

115.78.11.155:80

172.96.190.154:8080

50.116.78.109:8080

188.0.135.237:80

179.62.238.49:80

197.83.232.19:80

rsa_pubkey.plain

Targets

    • Target

      6a5b4b0b2bad4dfc77a29c16deba595f180d01c9f4b8bc02fb1acccef87376fe

    • Size

      363KB

    • MD5

      739ff0ae423314af2b9232945a4b41aa

    • SHA1

      51e539837c31a75c9942d44fc2151214402b8137

    • SHA256

      6a5b4b0b2bad4dfc77a29c16deba595f180d01c9f4b8bc02fb1acccef87376fe

    • SHA512

      e0fa1101665c5587f25f731c634480ae72e13039707bb6e9ab9ea22eed2917eef2604ee1b973d4a012302a969f6e01f60b1415abfcc73b63992ec0b06af3479a

    • SSDEEP

      6144:9d6cOQxFhNAup/iZXANH9KOhntU1JJatRvgdZ6C5a0tFtTT2:9Qup6Zs7M1mOr5a0ftTT

MITRE ATT&CK Enterprise v15

Tasks