General

  • Target

    f990f8645f93e47b9069e37d8f6a2aaf9a61c0b110369face0fcf70825c73adf

  • Size

    585KB

  • Sample

    241120-1vch9avdrr

  • MD5

    902d5a043204e4524007142b3d5d0d0b

  • SHA1

    21cc85759a9055704d55aafb6543bc19c8970897

  • SHA256

    f990f8645f93e47b9069e37d8f6a2aaf9a61c0b110369face0fcf70825c73adf

  • SHA512

    58a1bf99902b48c4f9d0383030b017dab2346d8d89925a73f80e08ff3deebfc14e6342dc463c82a424d88639adee1e0abbddb8e52294f605a7f06b4fff621b32

  • SSDEEP

    12288:vocAHzfdBuh0PBGEhq6FJxJ/3UEoiMxh:ZAT1BWEtBVUNiMP

Malware Config

Extracted

Family

emotet

Botnet

Epoch5

C2

202.28.34.99:8080

80.211.107.116:8080

175.126.176.79:8080

218.38.121.17:443

139.196.72.155:8080

103.71.99.57:8080

87.106.97.83:7080

178.62.112.199:8080

64.227.55.231:8080

46.101.98.60:8080

54.37.228.122:443

128.199.217.206:443

190.145.8.4:443

209.239.112.82:8080

85.214.67.203:8080

198.199.70.22:8080

128.199.242.164:8080

178.238.225.252:8080

103.85.95.4:8080

103.126.216.86:443

eck1.plain
ecs1.plain

Targets

    • Target

      f990f8645f93e47b9069e37d8f6a2aaf9a61c0b110369face0fcf70825c73adf

    • Size

      585KB

    • MD5

      902d5a043204e4524007142b3d5d0d0b

    • SHA1

      21cc85759a9055704d55aafb6543bc19c8970897

    • SHA256

      f990f8645f93e47b9069e37d8f6a2aaf9a61c0b110369face0fcf70825c73adf

    • SHA512

      58a1bf99902b48c4f9d0383030b017dab2346d8d89925a73f80e08ff3deebfc14e6342dc463c82a424d88639adee1e0abbddb8e52294f605a7f06b4fff621b32

    • SSDEEP

      12288:vocAHzfdBuh0PBGEhq6FJxJ/3UEoiMxh:ZAT1BWEtBVUNiMP

MITRE ATT&CK Matrix

Tasks