General

  • Target

    350de11002207786e087105fcc775f4a706a8f4ec7473a6f4667f229141891e4

  • Size

    176KB

  • Sample

    241113-wstyasznek

  • MD5

    0bb82abb2de769150cedc2a370317a91

  • SHA1

    3c867c62c7bc275891f9c5341e2f30b0f08d52a8

  • SHA256

    350de11002207786e087105fcc775f4a706a8f4ec7473a6f4667f229141891e4

  • SHA512

    8c10f9eac5432ad30a4b54d964d796ecbeef10139937f3202357329dc15031b8e88b40b4509d7f0900c86ff41d040b3cfd1444ad0ba5cf5c73f59cb396f7c1c5

  • SSDEEP

    3072:RxFrVZ8wIRbLlPl5FpCXDC8uPF+qZqcLknKtntNf98JvpjQqDbfoF:RLr/8w2bLlNj8uPLxVtntNfWJvZQO

Malware Config

Extracted

Family

emotet

Botnet

Epoch3

C2

118.7.227.42:443

188.226.165.170:8080

188.40.170.197:80

51.38.50.144:8080

153.229.219.1:443

162.144.145.58:8080

126.126.139.26:443

85.246.78.192:80

177.130.51.198:80

42.200.96.63:80

73.55.128.120:80

113.203.238.130:80

202.29.237.113:8080

181.59.59.54:80

58.27.215.3:8080

60.108.128.186:80

190.192.39.136:80

185.63.32.149:80

50.116.78.109:8080

121.117.147.153:443

rsa_pubkey.plain

Targets

    • Target

      350de11002207786e087105fcc775f4a706a8f4ec7473a6f4667f229141891e4

    • Size

      176KB

    • MD5

      0bb82abb2de769150cedc2a370317a91

    • SHA1

      3c867c62c7bc275891f9c5341e2f30b0f08d52a8

    • SHA256

      350de11002207786e087105fcc775f4a706a8f4ec7473a6f4667f229141891e4

    • SHA512

      8c10f9eac5432ad30a4b54d964d796ecbeef10139937f3202357329dc15031b8e88b40b4509d7f0900c86ff41d040b3cfd1444ad0ba5cf5c73f59cb396f7c1c5

    • SSDEEP

      3072:RxFrVZ8wIRbLlPl5FpCXDC8uPF+qZqcLknKtntNf98JvpjQqDbfoF:RLr/8w2bLlNj8uPLxVtntNfWJvZQO

MITRE ATT&CK Enterprise v15

Tasks