General

  • Target

    53a920e8d339d6141d0728ba40fcde987f15f91d7a0d4b14e61aef6f42bf410f

  • Size

    577KB

  • Sample

    241113-ra3ehatckr

  • MD5

    7817d666a9a03b4ffca80403070f5382

  • SHA1

    512ab2588b53416102a5c2c175f29e97880b2b8b

  • SHA256

    53a920e8d339d6141d0728ba40fcde987f15f91d7a0d4b14e61aef6f42bf410f

  • SHA512

    84c6809a94f4c0182fa86a896d865102d50b2afd8362dc48761de5f6e612f0a2eff7b766b3cf38d8b26de55285ee6f998355acbd888e42ddcad72ce66b17a249

  • SSDEEP

    12288:OdarWJIXriBtzwX1H+wYe6dFS7Zz5yJBUPENwPs:I/3BtzwlH+wYegFSaJiPEN

Malware Config

Extracted

Family

emotet

Botnet

Epoch1

C2

186.189.249.2:80

59.148.253.194:8080

173.212.197.71:8080

5.89.33.136:80

177.144.130.105:443

190.190.219.184:80

82.76.111.249:443

70.32.115.157:8080

62.84.75.50:80

190.24.243.186:80

51.15.7.145:80

24.232.228.233:80

46.105.114.137:8080

216.47.196.104:80

172.86.186.21:8080

186.103.141.250:443

128.92.203.42:80

190.188.245.242:80

152.169.22.67:80

170.81.48.2:80

rsa_pubkey.plain

Targets

    • Target

      53a920e8d339d6141d0728ba40fcde987f15f91d7a0d4b14e61aef6f42bf410f

    • Size

      577KB

    • MD5

      7817d666a9a03b4ffca80403070f5382

    • SHA1

      512ab2588b53416102a5c2c175f29e97880b2b8b

    • SHA256

      53a920e8d339d6141d0728ba40fcde987f15f91d7a0d4b14e61aef6f42bf410f

    • SHA512

      84c6809a94f4c0182fa86a896d865102d50b2afd8362dc48761de5f6e612f0a2eff7b766b3cf38d8b26de55285ee6f998355acbd888e42ddcad72ce66b17a249

    • SSDEEP

      12288:OdarWJIXriBtzwX1H+wYe6dFS7Zz5yJBUPENwPs:I/3BtzwlH+wYegFSaJiPEN

MITRE ATT&CK Enterprise v15

Tasks