General

  • Target

    15aa05f6c9dae768e8e84f57d02c6b2f8f8381b0e27f79455bc2151900d09722

  • Size

    176KB

  • Sample

    241120-1ct1kstckb

  • MD5

    ff1d7097def081b18c9886777d3ffa3a

  • SHA1

    7d8742ace49257b5d97d9a68e408d806cccaac9e

  • SHA256

    15aa05f6c9dae768e8e84f57d02c6b2f8f8381b0e27f79455bc2151900d09722

  • SHA512

    f906aaaf41255072bb960bdab87d8215eba7f7f20f4c2917fcfd03e6fb719348ce9e2566f6e361b41514c14c4476ba4c24744e22fb06ebbfbcefa974d2644cd4

  • SSDEEP

    3072:RZfRVec5LR6mv9v1+IFpIXDsmA9n/+WKw/SRk0H5w6b:RRRocz6mvzNmApGrw/SOa/b

Malware Config

Extracted

Family

emotet

Botnet

Epoch1

C2

81.214.253.80:443

94.23.62.116:8080

98.103.204.12:443

59.148.253.194:8080

197.232.36.108:80

74.58.215.226:80

79.118.74.90:80

181.123.6.86:80

5.89.33.136:80

137.74.106.111:7080

189.223.16.99:80

187.162.248.237:80

181.61.182.143:80

129.232.220.11:8080

178.211.45.66:8080

45.33.77.42:8080

94.176.234.118:443

128.92.203.42:80

12.162.84.2:8080

212.71.237.140:8080

rsa_pubkey.plain

Targets

    • Target

      15aa05f6c9dae768e8e84f57d02c6b2f8f8381b0e27f79455bc2151900d09722

    • Size

      176KB

    • MD5

      ff1d7097def081b18c9886777d3ffa3a

    • SHA1

      7d8742ace49257b5d97d9a68e408d806cccaac9e

    • SHA256

      15aa05f6c9dae768e8e84f57d02c6b2f8f8381b0e27f79455bc2151900d09722

    • SHA512

      f906aaaf41255072bb960bdab87d8215eba7f7f20f4c2917fcfd03e6fb719348ce9e2566f6e361b41514c14c4476ba4c24744e22fb06ebbfbcefa974d2644cd4

    • SSDEEP

      3072:RZfRVec5LR6mv9v1+IFpIXDsmA9n/+WKw/SRk0H5w6b:RRRocz6mvzNmApGrw/SOa/b

MITRE ATT&CK Enterprise v15

Tasks