General

  • Target

    be6618acc97e99689ce6b74de8c8aaa17beb90def1576d7ec210a03c7496a4d8

  • Size

    236KB

  • Sample

    241113-rbwncatajh

  • MD5

    2b054fa59697a8b21a307964c81d1272

  • SHA1

    e31a6f9989aafcbea0c8c37774aaaf6305d737db

  • SHA256

    be6618acc97e99689ce6b74de8c8aaa17beb90def1576d7ec210a03c7496a4d8

  • SHA512

    0e238b8260c0636cec956d514c41f1cff6299fdce492570e7bad8bd8d02d78f9bccdf5aee1fea9509c8fb986409593089a76764e9a447714b4c25bbb73189873

  • SSDEEP

    3072:QLdGL9Wt2ltzymHv7BeQj7UnIo9vPESiGGakrNeH7tdjI9bY07:Ii9WtytJsESZceHRdj2

Malware Config

Extracted

Family

emotet

Botnet

Epoch3

C2

186.109.104.67:80

185.86.148.68:443

139.99.157.213:8080

203.153.216.178:7080

192.163.221.191:8080

201.235.10.215:80

37.46.129.215:8080

78.189.60.109:443

77.74.78.80:443

143.95.101.72:8080

188.251.213.180:443

31.146.61.34:80

190.53.144.120:80

105.209.235.113:8080

115.78.11.155:80

172.96.190.154:8080

50.116.78.109:8080

188.0.135.237:80

179.62.238.49:80

197.83.232.19:80

rsa_pubkey.plain

Targets

    • Target

      be6618acc97e99689ce6b74de8c8aaa17beb90def1576d7ec210a03c7496a4d8

    • Size

      236KB

    • MD5

      2b054fa59697a8b21a307964c81d1272

    • SHA1

      e31a6f9989aafcbea0c8c37774aaaf6305d737db

    • SHA256

      be6618acc97e99689ce6b74de8c8aaa17beb90def1576d7ec210a03c7496a4d8

    • SHA512

      0e238b8260c0636cec956d514c41f1cff6299fdce492570e7bad8bd8d02d78f9bccdf5aee1fea9509c8fb986409593089a76764e9a447714b4c25bbb73189873

    • SSDEEP

      3072:QLdGL9Wt2ltzymHv7BeQj7UnIo9vPESiGGakrNeH7tdjI9bY07:Ii9WtytJsESZceHRdj2

MITRE ATT&CK Enterprise v15

Tasks