General

  • Target

    4d6d7b58df596f186720b70c7e6a9db69e95a65e359de4d9b34b51ae923b4c1f

  • Size

    585KB

  • Sample

    241113-rar9jasnc1

  • MD5

    6501a37dadd5fa9011d182ae231c27e0

  • SHA1

    7c781ed0037be2d07b88553b6d7d8de324f198fc

  • SHA256

    4d6d7b58df596f186720b70c7e6a9db69e95a65e359de4d9b34b51ae923b4c1f

  • SHA512

    61808e1fbfc55393b9ed5ff82df2f5e688c1869eeb7bfbbc878079cf65bd82a61a69600f3a3d87018f49d7369b7fdc1e2b8242ed7b8c7fd452e649af179e681c

  • SSDEEP

    12288:vocAHzfdBuh0PBGEhq6FJxJ/3UEoiMxr:ZAT1BWEtBVUNiMR

Malware Config

Extracted

Family

emotet

Botnet

Epoch5

C2

202.28.34.99:8080

80.211.107.116:8080

175.126.176.79:8080

218.38.121.17:443

139.196.72.155:8080

103.71.99.57:8080

87.106.97.83:7080

178.62.112.199:8080

64.227.55.231:8080

46.101.98.60:8080

54.37.228.122:443

128.199.217.206:443

190.145.8.4:443

209.239.112.82:8080

85.214.67.203:8080

198.199.70.22:8080

128.199.242.164:8080

178.238.225.252:8080

103.85.95.4:8080

103.126.216.86:443

eck1.plain
ecs1.plain

Targets

    • Target

      4d6d7b58df596f186720b70c7e6a9db69e95a65e359de4d9b34b51ae923b4c1f

    • Size

      585KB

    • MD5

      6501a37dadd5fa9011d182ae231c27e0

    • SHA1

      7c781ed0037be2d07b88553b6d7d8de324f198fc

    • SHA256

      4d6d7b58df596f186720b70c7e6a9db69e95a65e359de4d9b34b51ae923b4c1f

    • SHA512

      61808e1fbfc55393b9ed5ff82df2f5e688c1869eeb7bfbbc878079cf65bd82a61a69600f3a3d87018f49d7369b7fdc1e2b8242ed7b8c7fd452e649af179e681c

    • SSDEEP

      12288:vocAHzfdBuh0PBGEhq6FJxJ/3UEoiMxr:ZAT1BWEtBVUNiMR

MITRE ATT&CK Matrix

Tasks