General

  • Target

    222a85a541c4b818929638bdf06500623c84753bb5419c3d2d75f2a051f46ace

  • Size

    428KB

  • Sample

    241113-vts7qavqds

  • MD5

    cfecb0a2cbe057307c3fc7e12e480d57

  • SHA1

    712e4d080f5bef229898176174a55dab798f0e92

  • SHA256

    222a85a541c4b818929638bdf06500623c84753bb5419c3d2d75f2a051f46ace

  • SHA512

    11fde9207bfdc2bd16a875582f3dbd04e65c597fec5a08ecdb9747d8a046b38541031e38a421586ceaba2193abe9f0daa623fdb1d747747b064651a298ff4e3b

  • SSDEEP

    12288:X61KBnflNHOvmzIeCHf3/qJd60gmoP1jjv08/adpUu:X6wXC/3/qJd60gmoP1jjv08/ipUu

Malware Config

Extracted

Family

emotet

Botnet

Epoch1

C2

24.249.135.121:80

185.94.252.13:443

149.62.173.247:8080

50.28.51.143:8080

80.249.176.206:80

5.196.35.138:7080

190.17.195.202:80

143.0.87.101:80

190.147.137.153:443

181.30.69.50:80

51.255.165.160:8080

190.96.118.251:443

72.47.248.48:7080

178.79.163.131:8080

212.231.60.98:80

187.162.248.237:80

2.47.112.152:80

68.183.190.199:8080

192.241.143.52:8080

77.55.211.77:8080

rsa_pubkey.plain

Targets

    • Target

      222a85a541c4b818929638bdf06500623c84753bb5419c3d2d75f2a051f46ace

    • Size

      428KB

    • MD5

      cfecb0a2cbe057307c3fc7e12e480d57

    • SHA1

      712e4d080f5bef229898176174a55dab798f0e92

    • SHA256

      222a85a541c4b818929638bdf06500623c84753bb5419c3d2d75f2a051f46ace

    • SHA512

      11fde9207bfdc2bd16a875582f3dbd04e65c597fec5a08ecdb9747d8a046b38541031e38a421586ceaba2193abe9f0daa623fdb1d747747b064651a298ff4e3b

    • SSDEEP

      12288:X61KBnflNHOvmzIeCHf3/qJd60gmoP1jjv08/adpUu:X6wXC/3/qJd60gmoP1jjv08/ipUu

MITRE ATT&CK Enterprise v15

Tasks