General

  • Target

    23cc4eb6772d3dc3b2554dcfbc150a4e6b0ec0f90359658a88040e3715421df8

  • Size

    678KB

  • Sample

    241113-rb6hjssnft

  • MD5

    fdef5e96201993d4c0a3926c0a2dc98b

  • SHA1

    78214442f075c7d51cb5608c7e63a18c58ce47a2

  • SHA256

    23cc4eb6772d3dc3b2554dcfbc150a4e6b0ec0f90359658a88040e3715421df8

  • SHA512

    38cbf352591dbeff9af659d55c1063f67ef998ec133b84e310a890e59bc2a2b85080db1aaaca69d7e5b38ec339df7d514f5c8f1917e4f5136e84fd6899118dc9

  • SSDEEP

    12288:8nUIW4anSDGCH0fu1QJKwUbe1gUK7wrnUfpE:kUITnGCH+u1QJK8CwrUfpE

Malware Config

Extracted

Family

emotet

Botnet

Epoch5

C2

194.9.172.107:8080

66.42.57.149:443

165.22.73.229:8080

202.29.239.162:443

104.248.225.227:8080

54.38.242.185:443

103.133.214.242:8080

78.47.204.80:443

210.57.209.142:8080

103.41.204.169:8080

118.98.72.86:443

88.217.172.165:8080

87.106.97.83:7080

85.25.120.45:8080

195.77.239.39:8080

37.44.244.177:8080

36.67.23.59:443

160.16.143.191:7080

54.38.143.246:7080

159.69.237.188:443

ecs1.plain
eck1.plain

Targets

    • Target

      23cc4eb6772d3dc3b2554dcfbc150a4e6b0ec0f90359658a88040e3715421df8

    • Size

      678KB

    • MD5

      fdef5e96201993d4c0a3926c0a2dc98b

    • SHA1

      78214442f075c7d51cb5608c7e63a18c58ce47a2

    • SHA256

      23cc4eb6772d3dc3b2554dcfbc150a4e6b0ec0f90359658a88040e3715421df8

    • SHA512

      38cbf352591dbeff9af659d55c1063f67ef998ec133b84e310a890e59bc2a2b85080db1aaaca69d7e5b38ec339df7d514f5c8f1917e4f5136e84fd6899118dc9

    • SSDEEP

      12288:8nUIW4anSDGCH0fu1QJKwUbe1gUK7wrnUfpE:kUITnGCH+u1QJK8CwrUfpE

MITRE ATT&CK Matrix

Tasks