General

  • Target

    7acb4c9211be54d41306fbf3020a67f4f2d306bf0b408f97572b1bdc49cc2cad

  • Size

    132KB

  • Sample

    241113-rpn6estckb

  • MD5

    493dc9eaf86088db533bf7eb72cc4c07

  • SHA1

    efe391df22b037a7c70008dc9d24125c9c5a26de

  • SHA256

    7acb4c9211be54d41306fbf3020a67f4f2d306bf0b408f97572b1bdc49cc2cad

  • SHA512

    1a8b35040344976712d4b5df4c5b03325d528cbe874908ff227532c32d5882c7b70b3477e9db3bbcb984e0dc7596d682bfc1d878bc321dfa05ddcc53b0ee4322

  • SSDEEP

    1536:NjK9fyDVKIemjYYtuENTZAo2+byBrowoJdOBGqPl7O2l3LAs4Y:CfeVKIepYt0Nqy9o1KGqPl7O2lMs4Y

Malware Config

Extracted

Family

emotet

Botnet

Epoch3

C2

173.94.215.84:80

85.25.207.108:8080

178.128.14.92:8080

60.125.114.64:443

181.126.54.234:80

157.7.164.178:8081

95.216.205.155:8080

216.75.37.196:8080

179.62.238.49:80

71.57.180.213:80

172.96.190.154:8080

112.78.142.170:80

178.238.232.46:443

177.144.130.105:443

105.209.235.113:8080

46.105.131.68:8080

185.86.148.68:443

143.95.101.72:8080

75.127.14.170:8080

168.0.97.6:80

rsa_pubkey.plain

Targets

    • Target

      7acb4c9211be54d41306fbf3020a67f4f2d306bf0b408f97572b1bdc49cc2cad

    • Size

      132KB

    • MD5

      493dc9eaf86088db533bf7eb72cc4c07

    • SHA1

      efe391df22b037a7c70008dc9d24125c9c5a26de

    • SHA256

      7acb4c9211be54d41306fbf3020a67f4f2d306bf0b408f97572b1bdc49cc2cad

    • SHA512

      1a8b35040344976712d4b5df4c5b03325d528cbe874908ff227532c32d5882c7b70b3477e9db3bbcb984e0dc7596d682bfc1d878bc321dfa05ddcc53b0ee4322

    • SSDEEP

      1536:NjK9fyDVKIemjYYtuENTZAo2+byBrowoJdOBGqPl7O2l3LAs4Y:CfeVKIepYt0Nqy9o1KGqPl7O2lMs4Y

MITRE ATT&CK Enterprise v15

Tasks