General

  • Target

    1665d80ddf086e8089848819f0253c908d379ffe81805262b1a36feb5e40f385

  • Size

    388KB

  • Sample

    241113-rg619starf

  • MD5

    cf2dc9697af977834de61f94131e412b

  • SHA1

    03b23f10db4449885d44211872775f1020f0f2b3

  • SHA256

    1665d80ddf086e8089848819f0253c908d379ffe81805262b1a36feb5e40f385

  • SHA512

    79fa7c485b27c4bab2048c20d71ef214898b6c2c14342ff2e0fc05d361a2c6d1c1a361ea6e95a8c0b61f6fe8625f66c3e87d54d7a868f936f48fc20794420ce2

  • SSDEEP

    6144:O4m/apJdyV8fDp88SAGGwGGGGi/cNmGzc3A6431xVMe:S/aPdJsU3z431xVh

Malware Config

Extracted

Family

emotet

Botnet

Epoch2

C2

24.233.112.152:80

69.30.203.214:8080

192.210.135.126:8080

47.144.21.12:443

157.245.99.39:8080

119.198.40.179:80

62.75.141.82:80

181.211.11.242:80

167.86.90.214:8080

95.213.236.64:8080

87.106.139.101:8080

109.74.5.95:8080

142.105.151.124:443

47.146.117.214:80

185.94.252.104:443

2.58.16.85:7080

222.214.218.37:4143

85.105.205.77:8080

190.160.53.126:80

107.185.211.16:80

rsa_pubkey.plain

Targets

    • Target

      1665d80ddf086e8089848819f0253c908d379ffe81805262b1a36feb5e40f385

    • Size

      388KB

    • MD5

      cf2dc9697af977834de61f94131e412b

    • SHA1

      03b23f10db4449885d44211872775f1020f0f2b3

    • SHA256

      1665d80ddf086e8089848819f0253c908d379ffe81805262b1a36feb5e40f385

    • SHA512

      79fa7c485b27c4bab2048c20d71ef214898b6c2c14342ff2e0fc05d361a2c6d1c1a361ea6e95a8c0b61f6fe8625f66c3e87d54d7a868f936f48fc20794420ce2

    • SSDEEP

      6144:O4m/apJdyV8fDp88SAGGwGGGGi/cNmGzc3A6431xVMe:S/aPdJsU3z431xVh

MITRE ATT&CK Enterprise v15

Tasks