General

  • Target

    39ecb92c2da25d15b8ac4da89a854697640bdc72b0979dad6942ba4ba2c2326c

  • Size

    385KB

  • Sample

    241113-wqytgawlgx

  • MD5

    d58a591b304322da588c172dd03bf013

  • SHA1

    60e4451e530136e39ccff658ec8377ca0a3a5e23

  • SHA256

    39ecb92c2da25d15b8ac4da89a854697640bdc72b0979dad6942ba4ba2c2326c

  • SHA512

    49de1335ef41243dc6e51b657305f82eff8a32fba58fc00a1ded539ed098a96c94073c0713da7f22d22c8d6759ab707872fc8026ec8ddcb194e25971211d2574

  • SSDEEP

    6144:j53sLlAuORXSAMyd6DssOEl5/zxnt/QJWn+KXKwTCvNjHzETSUR7C2RxePKUv6:FMMSAv3El5bxVQJWn/XKaCpKTC2Rqzv6

Malware Config

Extracted

Family

emotet

Botnet

Epoch2

C2

174.102.48.180:80

88.217.172.164:443

51.75.33.120:8080

62.138.26.28:8080

169.239.182.217:8080

114.146.222.200:80

116.203.32.252:8080

103.86.49.11:8080

74.120.55.163:80

41.60.200.34:80

209.182.216.177:443

157.245.99.39:8080

87.106.139.101:8080

152.168.248.128:443

104.236.246.93:8080

47.144.21.12:443

139.130.242.43:80

181.230.116.163:80

72.12.127.184:443

61.19.246.238:443

rsa_pubkey.plain

Targets

    • Target

      39ecb92c2da25d15b8ac4da89a854697640bdc72b0979dad6942ba4ba2c2326c

    • Size

      385KB

    • MD5

      d58a591b304322da588c172dd03bf013

    • SHA1

      60e4451e530136e39ccff658ec8377ca0a3a5e23

    • SHA256

      39ecb92c2da25d15b8ac4da89a854697640bdc72b0979dad6942ba4ba2c2326c

    • SHA512

      49de1335ef41243dc6e51b657305f82eff8a32fba58fc00a1ded539ed098a96c94073c0713da7f22d22c8d6759ab707872fc8026ec8ddcb194e25971211d2574

    • SSDEEP

      6144:j53sLlAuORXSAMyd6DssOEl5/zxnt/QJWn+KXKwTCvNjHzETSUR7C2RxePKUv6:FMMSAv3El5bxVQJWn/XKaCpKTC2Rqzv6

MITRE ATT&CK Enterprise v15

Tasks