General

  • Target

    380223555f6e0a0d74e9f0a0952c33fb8eecd797f66af086b7f5dcc853083332

  • Size

    628KB

  • Sample

    241113-wqs8zsxbkq

  • MD5

    33562f206db6db887e65386051bd600d

  • SHA1

    6be03525148e326399af1d639263227c4760b660

  • SHA256

    380223555f6e0a0d74e9f0a0952c33fb8eecd797f66af086b7f5dcc853083332

  • SHA512

    14bddb517ec5d27e7339366e2212d29b51459b6068e4226ac588173af85280820b797a275b524c1b71303cffd212677582225e344eeaf234fde8a9b7f7845bea

  • SSDEEP

    6144:a5FdA9+3bkRQIwYEgRy2k46fifqlhyBQLzaWSv3nxyhXf:avdA9SGh9rBylQB4atPnxs

Malware Config

Extracted

Family

emotet

Botnet

Epoch1

C2

144.139.91.187:443

157.7.199.53:8080

189.218.165.63:80

104.236.161.64:8080

2.47.112.152:80

185.94.252.27:443

202.62.39.111:80

190.17.195.202:80

143.0.87.101:80

70.32.84.74:8080

45.161.242.102:80

190.194.242.254:443

50.28.51.143:8080

204.225.249.100:7080

137.74.106.111:7080

68.183.170.114:8080

181.31.211.181:80

149.62.173.247:8080

177.75.143.112:443

190.229.148.144:80

rsa_pubkey.plain

Targets

    • Target

      380223555f6e0a0d74e9f0a0952c33fb8eecd797f66af086b7f5dcc853083332

    • Size

      628KB

    • MD5

      33562f206db6db887e65386051bd600d

    • SHA1

      6be03525148e326399af1d639263227c4760b660

    • SHA256

      380223555f6e0a0d74e9f0a0952c33fb8eecd797f66af086b7f5dcc853083332

    • SHA512

      14bddb517ec5d27e7339366e2212d29b51459b6068e4226ac588173af85280820b797a275b524c1b71303cffd212677582225e344eeaf234fde8a9b7f7845bea

    • SSDEEP

      6144:a5FdA9+3bkRQIwYEgRy2k46fifqlhyBQLzaWSv3nxyhXf:avdA9SGh9rBylQB4atPnxs

MITRE ATT&CK Enterprise v15

Tasks