General

  • Target

    cf374b13736fb8d86962103cea1ee60efb1068110ac5aeceaf358af24056cffd

  • Size

    896KB

  • Sample

    241113-rjbyxaspft

  • MD5

    600b62942e0c28b621185345939ae1bd

  • SHA1

    2f93c3781e9ee7170e1262dea5d40315dd731350

  • SHA256

    cf374b13736fb8d86962103cea1ee60efb1068110ac5aeceaf358af24056cffd

  • SHA512

    ba165e24662eab2a17c6d28de4e0f499baa3e327bf73eda5a3d8655332fdb5a5db9761bc70789673883ff5efe1749c9d589cbfb9a38f96678a1aae38ef1b835e

  • SSDEEP

    12288:AZlyqwEmkmauSVd2R3R0EcX0euXBzsfsU3z4ZuF:2m6whk90BtyQ

Malware Config

Extracted

Family

emotet

Botnet

Epoch1

C2

174.100.27.229:80

209.126.6.222:8080

5.153.250.14:8080

192.241.146.84:8080

95.9.180.128:80

77.55.211.77:8080

85.105.140.135:443

45.33.77.42:8080

77.90.136.129:8080

94.176.234.118:443

190.163.31.26:80

190.6.193.152:8080

190.181.235.46:80

81.198.69.61:80

188.2.217.94:80

114.109.179.60:80

83.169.21.32:7080

137.74.106.111:7080

212.231.60.98:80

170.81.48.2:80

rsa_pubkey.plain

Targets

    • Target

      cf374b13736fb8d86962103cea1ee60efb1068110ac5aeceaf358af24056cffd

    • Size

      896KB

    • MD5

      600b62942e0c28b621185345939ae1bd

    • SHA1

      2f93c3781e9ee7170e1262dea5d40315dd731350

    • SHA256

      cf374b13736fb8d86962103cea1ee60efb1068110ac5aeceaf358af24056cffd

    • SHA512

      ba165e24662eab2a17c6d28de4e0f499baa3e327bf73eda5a3d8655332fdb5a5db9761bc70789673883ff5efe1749c9d589cbfb9a38f96678a1aae38ef1b835e

    • SSDEEP

      12288:AZlyqwEmkmauSVd2R3R0EcX0euXBzsfsU3z4ZuF:2m6whk90BtyQ

MITRE ATT&CK Enterprise v15

Tasks