General

  • Target

    6ca2a26ef57c4b84e0602b468bae89f83ad6dec43f5a49a11dd4a4209a6283c0

  • Size

    527KB

  • Sample

    241113-v6134awepa

  • MD5

    b05256f80a4576ad5dd528ea8ca8d63f

  • SHA1

    12a3ca5493799dd9b3985f861491ddbdc4ba0c2b

  • SHA256

    6ca2a26ef57c4b84e0602b468bae89f83ad6dec43f5a49a11dd4a4209a6283c0

  • SHA512

    89a00b1d3d62709897bbd0f39298ce1f0f1f8fd727557339ea773bf9b33a14787df2cdbd90e57e86018dd6f1f90a0185339489cd1388d6bcba76a6c98a6001c1

  • SSDEEP

    6144:GRQUWntghU/R+WtlgxTGZE7AeZ5V3Mi8oRifx/7/AOkcNlr+jOUTWolWVS/NeCcS:OUtghUkiKiZkAeZ5V3doKE+iQVsV0/

Malware Config

Extracted

Family

emotet

Botnet

Epoch4

C2

144.217.91.150:443

51.38.71.0:443

212.237.56.116:7080

79.172.212.216:8080

178.79.147.66:8080

138.185.72.26:8080

192.254.71.210:443

178.63.25.185:443

195.154.133.20:443

45.118.135.203:7080

81.0.236.90:443

107.182.225.142:8080

162.214.50.39:7080

50.116.54.215:443

203.114.109.124:443

45.118.115.99:8080

216.158.226.206:443

104.168.155.129:8080

110.232.117.186:8080

176.104.106.96:8080

eck1.plain
ecs1.plain

Targets

    • Target

      6ca2a26ef57c4b84e0602b468bae89f83ad6dec43f5a49a11dd4a4209a6283c0

    • Size

      527KB

    • MD5

      b05256f80a4576ad5dd528ea8ca8d63f

    • SHA1

      12a3ca5493799dd9b3985f861491ddbdc4ba0c2b

    • SHA256

      6ca2a26ef57c4b84e0602b468bae89f83ad6dec43f5a49a11dd4a4209a6283c0

    • SHA512

      89a00b1d3d62709897bbd0f39298ce1f0f1f8fd727557339ea773bf9b33a14787df2cdbd90e57e86018dd6f1f90a0185339489cd1388d6bcba76a6c98a6001c1

    • SSDEEP

      6144:GRQUWntghU/R+WtlgxTGZE7AeZ5V3Mi8oRifx/7/AOkcNlr+jOUTWolWVS/NeCcS:OUtghUkiKiZkAeZ5V3doKE+iQVsV0/

MITRE ATT&CK Enterprise v15

Tasks