General

  • Target

    7e005e37cb7e3c53828f6c7266e70493d9ab6dc2dc1ec429d67f04bad7a32ff3

  • Size

    68KB

  • Sample

    241112-zx5r5svkbm

  • MD5

    ff26e1a5f574d740d3b583f1f27b193c

  • SHA1

    8ca5eb524bcfd25adb0ca6bb7d278b21104146cb

  • SHA256

    7e005e37cb7e3c53828f6c7266e70493d9ab6dc2dc1ec429d67f04bad7a32ff3

  • SHA512

    762c542750d7947678c5422bc48be541ed19e9ea5e0468cfa2316dce30ca4572951ab78daeb68dec417d6357d7bdc4031cbf6beb0943114e312b5727c6966de9

  • SSDEEP

    1536:Y2nOIwpOrHswqSOjnTwZa8eYefjPCoAxsuR7fxGO:Y2xgQtqSOjnTwI8eXj6R74

Malware Config

Extracted

Family

emotet

Botnet

Epoch1

C2

58.171.153.81:80

104.131.103.128:443

66.228.49.173:8080

104.131.103.37:8080

149.62.173.247:8080

72.47.248.48:7080

68.183.170.114:8080

81.198.69.61:80

217.13.106.14:8080

77.90.136.129:8080

217.199.160.224:7080

178.79.163.131:8080

2.47.112.152:80

83.169.21.32:7080

190.163.31.26:80

185.94.252.27:443

12.162.84.2:8080

73.116.193.136:80

177.72.13.80:80

116.125.120.88:443

rsa_pubkey.plain

Targets

    • Target

      7e005e37cb7e3c53828f6c7266e70493d9ab6dc2dc1ec429d67f04bad7a32ff3

    • Size

      68KB

    • MD5

      ff26e1a5f574d740d3b583f1f27b193c

    • SHA1

      8ca5eb524bcfd25adb0ca6bb7d278b21104146cb

    • SHA256

      7e005e37cb7e3c53828f6c7266e70493d9ab6dc2dc1ec429d67f04bad7a32ff3

    • SHA512

      762c542750d7947678c5422bc48be541ed19e9ea5e0468cfa2316dce30ca4572951ab78daeb68dec417d6357d7bdc4031cbf6beb0943114e312b5727c6966de9

    • SSDEEP

      1536:Y2nOIwpOrHswqSOjnTwZa8eYefjPCoAxsuR7fxGO:Y2xgQtqSOjnTwI8eXj6R74

MITRE ATT&CK Enterprise v15

Tasks