General

  • Target

    d6abe74919f1fc41a2bb6a8fb4950af8e80ab1f732170573941cca2212669569

  • Size

    116KB

  • Sample

    241113-wsq7eawma1

  • MD5

    900a7b88c96c7078043b430fc5f9b983

  • SHA1

    ad828f09ffa3100e7900264198aa00d001d04171

  • SHA256

    d6abe74919f1fc41a2bb6a8fb4950af8e80ab1f732170573941cca2212669569

  • SHA512

    6965ddfd9ad7daec2b15938293aeb0552c7c2b45812ff5d4e28d7a2334d45043585baf17cc3ade05d6d41f33794db3f980e4ac075be10bd625f3644006c54127

  • SSDEEP

    1536:sTzVpjv/oidl5SYuO7akrNeAE7Q8dNxI9WapMhZ3:qjgiGGakrNeH7tdjI9bY

Malware Config

Extracted

Family

emotet

Botnet

Epoch3

C2

186.109.104.67:80

185.86.148.68:443

139.99.157.213:8080

203.153.216.178:7080

192.163.221.191:8080

201.235.10.215:80

37.46.129.215:8080

78.189.60.109:443

77.74.78.80:443

143.95.101.72:8080

188.251.213.180:443

31.146.61.34:80

190.53.144.120:80

105.209.235.113:8080

115.78.11.155:80

172.96.190.154:8080

50.116.78.109:8080

188.0.135.237:80

179.62.238.49:80

197.83.232.19:80

rsa_pubkey.plain

Targets

    • Target

      d6abe74919f1fc41a2bb6a8fb4950af8e80ab1f732170573941cca2212669569

    • Size

      116KB

    • MD5

      900a7b88c96c7078043b430fc5f9b983

    • SHA1

      ad828f09ffa3100e7900264198aa00d001d04171

    • SHA256

      d6abe74919f1fc41a2bb6a8fb4950af8e80ab1f732170573941cca2212669569

    • SHA512

      6965ddfd9ad7daec2b15938293aeb0552c7c2b45812ff5d4e28d7a2334d45043585baf17cc3ade05d6d41f33794db3f980e4ac075be10bd625f3644006c54127

    • SSDEEP

      1536:sTzVpjv/oidl5SYuO7akrNeAE7Q8dNxI9WapMhZ3:qjgiGGakrNeH7tdjI9bY

MITRE ATT&CK Enterprise v15

Tasks