General

  • Target

    8066e22dc9a0a9cf7bb7ce026caac02c5db227e2ceca82a1fd0467d8db236e90

  • Size

    96KB

  • Sample

    241113-vt4y8avqdw

  • MD5

    7f52f9c51c68fbeb6c1310f15e6e0dd1

  • SHA1

    c0999c0df963df84d17c0e4818949e10462665f2

  • SHA256

    8066e22dc9a0a9cf7bb7ce026caac02c5db227e2ceca82a1fd0467d8db236e90

  • SHA512

    65e6be2f4e215e22a224e8be4c54471494f6c0cc6c6469d4d0a4784ae336b02f34d4fcdce487704e6d2d8b9b09c1333fb36d445fe0e0527b395319047d30425d

  • SSDEEP

    1536:4NfzLLPzj3f0tcC9Rq204xKZHZWX2oppUeCW2Bh:4NLLLPzj38C2RxePqpUv7H

Malware Config

Extracted

Family

emotet

Botnet

Epoch2

C2

174.102.48.180:80

192.210.135.126:8080

67.205.85.243:8080

47.146.32.175:80

116.203.32.252:8080

189.212.199.126:443

72.12.127.184:443

180.92.239.110:8080

103.86.49.11:8080

181.230.116.163:80

157.147.76.151:80

74.120.55.163:80

121.124.124.40:7080

79.98.24.39:8080

142.105.151.124:443

167.86.90.214:8080

24.179.13.119:80

62.138.26.28:8080

165.165.171.160:8080

74.208.45.104:8080

rsa_pubkey.plain

Targets

    • Target

      8066e22dc9a0a9cf7bb7ce026caac02c5db227e2ceca82a1fd0467d8db236e90

    • Size

      96KB

    • MD5

      7f52f9c51c68fbeb6c1310f15e6e0dd1

    • SHA1

      c0999c0df963df84d17c0e4818949e10462665f2

    • SHA256

      8066e22dc9a0a9cf7bb7ce026caac02c5db227e2ceca82a1fd0467d8db236e90

    • SHA512

      65e6be2f4e215e22a224e8be4c54471494f6c0cc6c6469d4d0a4784ae336b02f34d4fcdce487704e6d2d8b9b09c1333fb36d445fe0e0527b395319047d30425d

    • SSDEEP

      1536:4NfzLLPzj3f0tcC9Rq204xKZHZWX2oppUeCW2Bh:4NLLLPzj38C2RxePqpUv7H

MITRE ATT&CK Enterprise v15

Tasks