General

  • Target

    2b427f8856cd2b6c20d73599946143a677320130d3e0d99376347d86cc333862

  • Size

    96KB

  • Sample

    241113-rgmmmatdjr

  • MD5

    3f8d89fedb97aec2f60aa0cde2053915

  • SHA1

    49227dd475730ca3aa0fc6f9682784ee42b6d757

  • SHA256

    2b427f8856cd2b6c20d73599946143a677320130d3e0d99376347d86cc333862

  • SHA512

    33a72f4701691edc9d94b45184fc595788d9d77c566700d26c0a7644b3c45a3afc8f1350505a3e9a75846350c5b1c32236bd50d0674c98921806be0b919bea9d

  • SSDEEP

    1536:0NfzLL44Iozf3x0K8RqjeygS93gQD/zWpQzN82Ap:0NLLLvzf3tljV3Prypq8P

Malware Config

Extracted

Family

emotet

Botnet

Epoch3

C2

176.216.226.44:80

159.203.232.29:8080

185.86.148.68:443

87.106.231.60:8080

113.161.148.81:80

78.189.60.109:443

192.163.221.191:8080

31.146.61.34:80

37.70.131.107:80

153.220.182.49:80

177.144.130.105:443

181.167.35.84:80

202.5.47.71:80

192.241.220.183:8080

78.188.170.128:80

182.176.95.147:80

87.252.100.28:80

115.78.11.155:80

212.156.133.218:80

203.153.216.178:7080

rsa_pubkey.plain

Targets

    • Target

      2b427f8856cd2b6c20d73599946143a677320130d3e0d99376347d86cc333862

    • Size

      96KB

    • MD5

      3f8d89fedb97aec2f60aa0cde2053915

    • SHA1

      49227dd475730ca3aa0fc6f9682784ee42b6d757

    • SHA256

      2b427f8856cd2b6c20d73599946143a677320130d3e0d99376347d86cc333862

    • SHA512

      33a72f4701691edc9d94b45184fc595788d9d77c566700d26c0a7644b3c45a3afc8f1350505a3e9a75846350c5b1c32236bd50d0674c98921806be0b919bea9d

    • SSDEEP

      1536:0NfzLL44Iozf3x0K8RqjeygS93gQD/zWpQzN82Ap:0NLLLvzf3tljV3Prypq8P

MITRE ATT&CK Enterprise v15

Tasks