General

  • Target

    ed3cac2c34c729a0b474f8d79b7be0d78d1babaffe39a3446463d15c126585ac

  • Size

    585KB

  • Sample

    241113-rkca3atbma

  • MD5

    be114fe9d25d51470fc49c3cf7402056

  • SHA1

    60c24f48b030337545d502f449361f3d0c614670

  • SHA256

    ed3cac2c34c729a0b474f8d79b7be0d78d1babaffe39a3446463d15c126585ac

  • SHA512

    51eb6bb34567133014b295ac6114c01c7912a3380fb718d3cd28d2ac229b7c3c352967274a12ddab9f4ec06cff60aa0d71bd0b30f3b7a21b275833e3dbb68163

  • SSDEEP

    12288:vocAHzfdBuh0PBGEhq6FJxJ/3UEoiMxz:ZAT1BWEtBVUNiMR

Malware Config

Extracted

Family

emotet

Botnet

Epoch5

C2

202.28.34.99:8080

80.211.107.116:8080

175.126.176.79:8080

218.38.121.17:443

139.196.72.155:8080

103.71.99.57:8080

87.106.97.83:7080

178.62.112.199:8080

64.227.55.231:8080

46.101.98.60:8080

54.37.228.122:443

128.199.217.206:443

190.145.8.4:443

209.239.112.82:8080

85.214.67.203:8080

198.199.70.22:8080

128.199.242.164:8080

178.238.225.252:8080

103.85.95.4:8080

103.126.216.86:443

eck1.plain
ecs1.plain

Targets

    • Target

      ed3cac2c34c729a0b474f8d79b7be0d78d1babaffe39a3446463d15c126585ac

    • Size

      585KB

    • MD5

      be114fe9d25d51470fc49c3cf7402056

    • SHA1

      60c24f48b030337545d502f449361f3d0c614670

    • SHA256

      ed3cac2c34c729a0b474f8d79b7be0d78d1babaffe39a3446463d15c126585ac

    • SHA512

      51eb6bb34567133014b295ac6114c01c7912a3380fb718d3cd28d2ac229b7c3c352967274a12ddab9f4ec06cff60aa0d71bd0b30f3b7a21b275833e3dbb68163

    • SSDEEP

      12288:vocAHzfdBuh0PBGEhq6FJxJ/3UEoiMxz:ZAT1BWEtBVUNiMR

MITRE ATT&CK Matrix

Tasks