General

  • Target

    3db3a112f97e0505f6e3c3d09ae345221c24fbefa0c8955ffddd061aa616f22a

  • Size

    96KB

  • Sample

    241113-wq8cxawlg1

  • MD5

    36f5ad680d62f696b19d63fdb63ce8bc

  • SHA1

    5d5b1d2b23699b57c1c494241b954836d80ebfaf

  • SHA256

    3db3a112f97e0505f6e3c3d09ae345221c24fbefa0c8955ffddd061aa616f22a

  • SHA512

    0c848eb788afdb5d98842481824d4a39f1df7db600a7ee5065b048ff8f54e6e647b5f91a7f7452f10c86eb5b4433259219a4933e9e3ffbb5dade4cba452ece5e

  • SSDEEP

    1536:NNfzLL4zfDzj3f0tcC9Rq204xKZHZWX2oppUeCW2Bh:NNLLL4jDzj38C2RxePqpUv7H

Malware Config

Extracted

Family

emotet

Botnet

Epoch2

C2

174.102.48.180:80

192.210.135.126:8080

67.205.85.243:8080

47.146.32.175:80

116.203.32.252:8080

189.212.199.126:443

72.12.127.184:443

180.92.239.110:8080

103.86.49.11:8080

181.230.116.163:80

157.147.76.151:80

74.120.55.163:80

121.124.124.40:7080

79.98.24.39:8080

142.105.151.124:443

167.86.90.214:8080

24.179.13.119:80

62.138.26.28:8080

165.165.171.160:8080

74.208.45.104:8080

rsa_pubkey.plain

Targets

    • Target

      3db3a112f97e0505f6e3c3d09ae345221c24fbefa0c8955ffddd061aa616f22a

    • Size

      96KB

    • MD5

      36f5ad680d62f696b19d63fdb63ce8bc

    • SHA1

      5d5b1d2b23699b57c1c494241b954836d80ebfaf

    • SHA256

      3db3a112f97e0505f6e3c3d09ae345221c24fbefa0c8955ffddd061aa616f22a

    • SHA512

      0c848eb788afdb5d98842481824d4a39f1df7db600a7ee5065b048ff8f54e6e647b5f91a7f7452f10c86eb5b4433259219a4933e9e3ffbb5dade4cba452ece5e

    • SSDEEP

      1536:NNfzLL4zfDzj3f0tcC9Rq204xKZHZWX2oppUeCW2Bh:NNLLL4jDzj38C2RxePqpUv7H

MITRE ATT&CK Enterprise v15

Tasks