General

  • Target

    be057ad13a5522693df36642a53ed7e1b1bd2e2346215f2cc301aaae90334682

  • Size

    188KB

  • Sample

    241113-rjy4faspgv

  • MD5

    a089f267968b6916687260d2f9e8df9d

  • SHA1

    057c143a7bbe84fb09c75b03a5f7becf904bf334

  • SHA256

    be057ad13a5522693df36642a53ed7e1b1bd2e2346215f2cc301aaae90334682

  • SHA512

    2a496d0c84edb57e8a02cee7e254f2384e1eb47d5268d47de4c1b6d986b6ea64e5a642360f7d26a91901206a5283714425d7309149d2dd1931a56d28883419e2

  • SSDEEP

    1536:ZOwR2ZIZJZe7+l4AAkdXagJaYdt7ADBpBWkSlC5XIGA/3x09zn:ZOwR2ZSJo6+A3ag04UDBGY54r/q9zn

Malware Config

Extracted

Family

emotet

Botnet

Epoch2

C2

74.120.55.163:80

176.10.250.88:8080

96.8.113.4:8080

137.59.187.107:8080

74.208.45.104:8080

104.131.11.150:443

110.145.77.103:80

87.106.136.232:8080

114.146.222.200:80

37.187.72.193:8080

181.230.116.163:80

70.167.215.250:8080

103.86.49.11:8080

201.173.217.124:443

109.74.5.95:8080

95.213.236.64:8080

5.39.91.110:7080

78.24.219.147:8080

81.2.235.111:8080

183.101.175.193:80

rsa_pubkey.plain

Targets

    • Target

      be057ad13a5522693df36642a53ed7e1b1bd2e2346215f2cc301aaae90334682

    • Size

      188KB

    • MD5

      a089f267968b6916687260d2f9e8df9d

    • SHA1

      057c143a7bbe84fb09c75b03a5f7becf904bf334

    • SHA256

      be057ad13a5522693df36642a53ed7e1b1bd2e2346215f2cc301aaae90334682

    • SHA512

      2a496d0c84edb57e8a02cee7e254f2384e1eb47d5268d47de4c1b6d986b6ea64e5a642360f7d26a91901206a5283714425d7309149d2dd1931a56d28883419e2

    • SSDEEP

      1536:ZOwR2ZIZJZe7+l4AAkdXagJaYdt7ADBpBWkSlC5XIGA/3x09zn:ZOwR2ZSJo6+A3ag04UDBGY54r/q9zn

MITRE ATT&CK Enterprise v15

Tasks