General

  • Target

    7a732771c9ec792960e390fe097d617b40d99164f57275c0dbf3ae7f0bcfa729

  • Size

    341KB

  • Sample

    241120-15zfrsvjhw

  • MD5

    a6a8a3ca276bb7c71b24e7a78a4538cb

  • SHA1

    64e6fc5f0481176abcc056a2e9a1cb074c22da7e

  • SHA256

    7a732771c9ec792960e390fe097d617b40d99164f57275c0dbf3ae7f0bcfa729

  • SHA512

    b2dd28cfffd4650be721ec563d7d855deb10152bd40238d8892a7b5d40524cfc570a396df5e04037a54dcabb5472140a4a07fbafda2ec1212c1093b7ba79702c

  • SSDEEP

    6144:BhJyYjnAtnunbIx0rW3PaItB4mLFXc6J3T3ulcpMzYS9ppD:9Iu8OWyIHnDx+zYSXp

Malware Config

Extracted

Family

emotet

Botnet

Epoch1

C2

2.45.176.233:80

98.103.204.12:443

172.86.186.21:8080

192.175.111.214:8080

109.190.249.106:80

177.144.130.105:8080

70.32.84.74:8080

192.81.38.31:80

138.97.60.140:8080

189.223.16.99:80

175.143.12.123:8080

190.115.18.139:8080

170.81.48.2:80

5.196.35.138:7080

172.104.169.32:8080

178.250.54.208:8080

185.94.252.27:443

46.105.114.137:8080

79.118.74.90:80

70.169.17.134:80

rsa_pubkey.plain

Targets

    • Target

      7a732771c9ec792960e390fe097d617b40d99164f57275c0dbf3ae7f0bcfa729

    • Size

      341KB

    • MD5

      a6a8a3ca276bb7c71b24e7a78a4538cb

    • SHA1

      64e6fc5f0481176abcc056a2e9a1cb074c22da7e

    • SHA256

      7a732771c9ec792960e390fe097d617b40d99164f57275c0dbf3ae7f0bcfa729

    • SHA512

      b2dd28cfffd4650be721ec563d7d855deb10152bd40238d8892a7b5d40524cfc570a396df5e04037a54dcabb5472140a4a07fbafda2ec1212c1093b7ba79702c

    • SSDEEP

      6144:BhJyYjnAtnunbIx0rW3PaItB4mLFXc6J3T3ulcpMzYS9ppD:9Iu8OWyIHnDx+zYSXp

MITRE ATT&CK Enterprise v15

Tasks