General

  • Target

    df8382475ae4724e3fbffc2cb881b77a65722a635377fe81c7479fe06ec1b3cd

  • Size

    361KB

  • Sample

    241113-rp86latekq

  • MD5

    44946651303b83543bdb0bf9d0c5a051

  • SHA1

    75413df1c3d43480b0511b9f62d6922c81e30c27

  • SHA256

    df8382475ae4724e3fbffc2cb881b77a65722a635377fe81c7479fe06ec1b3cd

  • SHA512

    2d0cbdf336d34dfbf32cc83fb6f7cf6a4bf9f4da8efd5e29fef1e2913ba3ce7d75c01a82d733bb07d0d1d9efbfe877fdb4604a62cebf0c6559308792c4ed00a4

  • SSDEEP

    6144:QWXIwVZNNuh5pVI7Lf36g3uLcxjmkoVvLg+4wnS9+RR1eis3f1k:PNE5pVI7z36g3uIxjmhVvxnY+71Xge

Malware Config

Extracted

Family

emotet

Botnet

Epoch3

C2

221.147.142.214:80

188.40.170.197:80

51.38.50.144:8080

46.22.116.163:7080

190.151.5.131:443

58.27.215.3:8080

179.5.118.12:80

73.100.19.104:80

192.210.217.94:8080

192.163.221.191:8080

103.93.220.182:80

91.213.106.100:8080

190.192.39.136:80

115.79.59.157:80

190.164.135.81:80

91.83.93.103:443

188.166.220.180:7080

116.202.10.123:8080

36.91.44.183:80

77.74.78.80:443

rsa_pubkey.plain

Targets

    • Target

      df8382475ae4724e3fbffc2cb881b77a65722a635377fe81c7479fe06ec1b3cd

    • Size

      361KB

    • MD5

      44946651303b83543bdb0bf9d0c5a051

    • SHA1

      75413df1c3d43480b0511b9f62d6922c81e30c27

    • SHA256

      df8382475ae4724e3fbffc2cb881b77a65722a635377fe81c7479fe06ec1b3cd

    • SHA512

      2d0cbdf336d34dfbf32cc83fb6f7cf6a4bf9f4da8efd5e29fef1e2913ba3ce7d75c01a82d733bb07d0d1d9efbfe877fdb4604a62cebf0c6559308792c4ed00a4

    • SSDEEP

      6144:QWXIwVZNNuh5pVI7Lf36g3uLcxjmkoVvLg+4wnS9+RR1eis3f1k:PNE5pVI7z36g3uIxjmhVvxnY+71Xge

MITRE ATT&CK Enterprise v15

Tasks