General

  • Target

    e06d5d2da207accdbbe6abf77f3427a9635f9eff545e9e0e11c8cbab4d5334c2

  • Size

    372KB

  • Sample

    241113-wfja2awhmq

  • MD5

    ac7a0bf2575f08944a38400a752c56f7

  • SHA1

    fd32f1b9f5e828fe4a99bc6d11f9f2c24514d855

  • SHA256

    e06d5d2da207accdbbe6abf77f3427a9635f9eff545e9e0e11c8cbab4d5334c2

  • SHA512

    c6d2d70346576ef4c30755ecaad81b049444eecad8c8f90b1e436fe3eb40ed395259dbcd97ab17c4f71ac5eeea377e5052577ee89afbf435f5e4f86331e9e2bb

  • SSDEEP

    6144:cw6KjnnTFBAiDj+0fTkSGiurL1+scETSURw5pEbtuI:5tBRDj+0rkThWKI5pE7

Malware Config

Extracted

Family

emotet

Botnet

Epoch2

C2

174.102.48.180:80

88.217.172.164:443

51.75.33.120:8080

62.138.26.28:8080

169.239.182.217:8080

114.146.222.200:80

116.203.32.252:8080

103.86.49.11:8080

74.120.55.163:80

41.60.200.34:80

209.182.216.177:443

157.245.99.39:8080

87.106.139.101:8080

152.168.248.128:443

104.236.246.93:8080

47.144.21.12:443

139.130.242.43:80

181.230.116.163:80

72.12.127.184:443

61.19.246.238:443

rsa_pubkey.plain

Targets

    • Target

      e06d5d2da207accdbbe6abf77f3427a9635f9eff545e9e0e11c8cbab4d5334c2

    • Size

      372KB

    • MD5

      ac7a0bf2575f08944a38400a752c56f7

    • SHA1

      fd32f1b9f5e828fe4a99bc6d11f9f2c24514d855

    • SHA256

      e06d5d2da207accdbbe6abf77f3427a9635f9eff545e9e0e11c8cbab4d5334c2

    • SHA512

      c6d2d70346576ef4c30755ecaad81b049444eecad8c8f90b1e436fe3eb40ed395259dbcd97ab17c4f71ac5eeea377e5052577ee89afbf435f5e4f86331e9e2bb

    • SSDEEP

      6144:cw6KjnnTFBAiDj+0fTkSGiurL1+scETSURw5pEbtuI:5tBRDj+0rkThWKI5pE7

MITRE ATT&CK Enterprise v15

Tasks