General

  • Target

    b24dd1afdab68766a5bce0d92ea32bdbb55a9b55514ffc818a96e3ec23700094

  • Size

    668KB

  • Sample

    241113-rhc5kstarh

  • MD5

    7e1006f375c139cca1f1cadfb0bf817e

  • SHA1

    bb0130a0c44b552cd6296839fb40198887280865

  • SHA256

    b24dd1afdab68766a5bce0d92ea32bdbb55a9b55514ffc818a96e3ec23700094

  • SHA512

    3a7af2b3c70493c52e38d439a8efbf025561a5aeff6fa2371d3fcd6064f193cb3a5563bf36cb131a2dfb03b68cb3ee1ee474b56e4c4c128cbf698d9c03c91ecb

  • SSDEEP

    12288:d2NVqHzevfqCG8pInsjtoXejRnBMm8y32:d2KWfqmpI+oyp6

Malware Config

Extracted

Family

emotet

Botnet

Epoch2

C2

76.27.179.47:80

212.51.142.238:8080

189.212.199.126:443

61.19.246.238:443

162.154.38.103:80

91.211.88.52:7080

83.110.223.58:443

124.45.106.173:443

116.203.32.252:8080

109.117.53.230:443

5.196.74.210:8080

75.139.38.211:80

168.235.67.138:7080

176.111.60.55:8080

169.239.182.217:8080

74.208.45.104:8080

31.31.77.83:443

222.214.218.37:4143

37.139.21.175:8080

91.205.215.66:443

rsa_pubkey.plain

Targets

    • Target

      b24dd1afdab68766a5bce0d92ea32bdbb55a9b55514ffc818a96e3ec23700094

    • Size

      668KB

    • MD5

      7e1006f375c139cca1f1cadfb0bf817e

    • SHA1

      bb0130a0c44b552cd6296839fb40198887280865

    • SHA256

      b24dd1afdab68766a5bce0d92ea32bdbb55a9b55514ffc818a96e3ec23700094

    • SHA512

      3a7af2b3c70493c52e38d439a8efbf025561a5aeff6fa2371d3fcd6064f193cb3a5563bf36cb131a2dfb03b68cb3ee1ee474b56e4c4c128cbf698d9c03c91ecb

    • SSDEEP

      12288:d2NVqHzevfqCG8pInsjtoXejRnBMm8y32:d2KWfqmpI+oyp6

MITRE ATT&CK Enterprise v15

Tasks