General

  • Target

    e7c701028742f495c71c75b9db147259a157517036fc4f4aef0ffd6edde4af86

  • Size

    372KB

  • Sample

    241120-1cpe4avbjr

  • MD5

    3bdad92854c41c07bf8129355de47db4

  • SHA1

    a6367777df42271b7966fb6b48967219d549ba0e

  • SHA256

    e7c701028742f495c71c75b9db147259a157517036fc4f4aef0ffd6edde4af86

  • SHA512

    0a4b64e2fdbc7ed3e68793956597e379aac94026c034d5cf95529163041f3bb9bafc0c32f61f891d6ac3d04d6d4c267b70318550116e137a16d182f164c4fc37

  • SSDEEP

    6144:8qpqdUS0u6jJ6KfkWdjCuv4ZVmeg755iLNVfhR7BsiQ6OiW:8qp8US0HFXfRBDmLNVfhG6

Malware Config

Extracted

Family

emotet

Botnet

Epoch1

C2

73.116.193.136:80

185.94.252.13:443

149.62.173.247:8080

89.32.150.160:8080

185.94.252.12:80

77.90.136.129:8080

83.169.21.32:7080

104.236.161.64:8080

114.109.179.60:80

189.2.177.210:443

68.183.190.199:8080

144.139.91.187:443

185.94.252.27:443

190.181.235.46:80

82.196.15.205:8080

46.28.111.142:7080

181.167.96.215:80

202.62.39.111:80

219.92.13.25:80

191.99.160.58:80

rsa_pubkey.plain

Targets

    • Target

      e7c701028742f495c71c75b9db147259a157517036fc4f4aef0ffd6edde4af86

    • Size

      372KB

    • MD5

      3bdad92854c41c07bf8129355de47db4

    • SHA1

      a6367777df42271b7966fb6b48967219d549ba0e

    • SHA256

      e7c701028742f495c71c75b9db147259a157517036fc4f4aef0ffd6edde4af86

    • SHA512

      0a4b64e2fdbc7ed3e68793956597e379aac94026c034d5cf95529163041f3bb9bafc0c32f61f891d6ac3d04d6d4c267b70318550116e137a16d182f164c4fc37

    • SSDEEP

      6144:8qpqdUS0u6jJ6KfkWdjCuv4ZVmeg755iLNVfhR7BsiQ6OiW:8qp8US0HFXfRBDmLNVfhG6

MITRE ATT&CK Enterprise v15

Tasks