General

  • Target

    810f4b311d44db88388303bbc2ba9916af7a3023daabf03e1c956ea4bdb2f11b

  • Size

    504KB

  • Sample

    241113-rhrb7stbje

  • MD5

    de6da6b64814f2e6d7755ba83c735f83

  • SHA1

    1d33888124520b7384265b8b589fa3c431d7b42a

  • SHA256

    810f4b311d44db88388303bbc2ba9916af7a3023daabf03e1c956ea4bdb2f11b

  • SHA512

    2983ce724d7f4525bad76b9d1a8d36d7120a0592c0fd620e90a92b029e8592ead52717cb35e3c1d3d05a6896c899c74bbd3b8b85efbe5917f24140c37b789d97

  • SSDEEP

    6144:PUDnBbfgYDPtXdQVksf10PX21oBkYnaeldx2RQliZATJEP/VEEhOSgpypDrTXyae:WnXttQ+Je1oBSYxiQ1EP/VEEtgWXW

Malware Config

Extracted

Family

emotet

Botnet

Epoch1

C2

186.189.249.2:80

59.148.253.194:8080

173.212.197.71:8080

5.89.33.136:80

177.144.130.105:443

190.190.219.184:80

82.76.111.249:443

70.32.115.157:8080

62.84.75.50:80

190.24.243.186:80

51.15.7.145:80

24.232.228.233:80

46.105.114.137:8080

216.47.196.104:80

172.86.186.21:8080

186.103.141.250:443

128.92.203.42:80

190.188.245.242:80

152.169.22.67:80

170.81.48.2:80

rsa_pubkey.plain

Targets

    • Target

      810f4b311d44db88388303bbc2ba9916af7a3023daabf03e1c956ea4bdb2f11b

    • Size

      504KB

    • MD5

      de6da6b64814f2e6d7755ba83c735f83

    • SHA1

      1d33888124520b7384265b8b589fa3c431d7b42a

    • SHA256

      810f4b311d44db88388303bbc2ba9916af7a3023daabf03e1c956ea4bdb2f11b

    • SHA512

      2983ce724d7f4525bad76b9d1a8d36d7120a0592c0fd620e90a92b029e8592ead52717cb35e3c1d3d05a6896c899c74bbd3b8b85efbe5917f24140c37b789d97

    • SSDEEP

      6144:PUDnBbfgYDPtXdQVksf10PX21oBkYnaeldx2RQliZATJEP/VEEhOSgpypDrTXyae:WnXttQ+Je1oBSYxiQ1EP/VEEtgWXW

MITRE ATT&CK Enterprise v15

Tasks