General

  • Target

    23fc6a9871c42e327fcb54002dc2cbf2d605d24bb3a667814d387a9c26c3c11b

  • Size

    312KB

  • Sample

    241120-1yzg7atfpf

  • MD5

    288c2b219994fa557ea5db1ebe88a339

  • SHA1

    fc642262c2d05fe416b4a50c423fad4fa8a25fd8

  • SHA256

    23fc6a9871c42e327fcb54002dc2cbf2d605d24bb3a667814d387a9c26c3c11b

  • SHA512

    de5275d6d2f331dbe0a247a785179071ffcb731f21238a0aa446bee989bbf1e9e65b0e4de4892e4278e768c4e239331c985fe05a8ddd3142249ab9b7dfd1a2de

  • SSDEEP

    6144:j79zCKWoje83i23aqYDSsIijxoYRCPPivZ2W+pAbuGKobW6cnl78EP1RAI4VA6j1:39zCgV3IqYDhNPbb2AyKW6cl78MAvlCK

Malware Config

Extracted

Family

emotet

Botnet

Epoch5

C2

103.42.57.17:8080

93.104.208.37:8080

195.154.146.35:443

62.171.178.147:8080

37.59.209.141:8080

139.196.72.155:8080

37.44.244.177:8080

191.252.103.16:80

217.182.143.207:443

128.199.192.135:8080

103.41.204.169:8080

185.148.168.15:8080

168.197.250.14:80

78.46.73.125:443

194.9.172.107:8080

185.148.168.220:8080

118.98.72.86:443

54.37.106.167:8080

78.47.204.80:443

159.69.237.188:443

eck1.plain
ecs1.plain

Targets

    • Target

      005da7f2918e789d6e80eb813e7cc697fd48d5391ecd7478b12e6f849267a323

    • Size

      600KB

    • MD5

      5eca85bf938914e7892004f2c96f135f

    • SHA1

      ed293f83c284328fb02b013209c3e56ae1eeede4

    • SHA256

      005da7f2918e789d6e80eb813e7cc697fd48d5391ecd7478b12e6f849267a323

    • SHA512

      0b642693e6090e7d7fa573cf0f905879d5bc0183ff0cf3b7dde155c6bef3b85d12fd3521737a3d75265135893187d257c436e5a55676c0d60e1e580f1bf88552

    • SSDEEP

      12288:l4WjRiEKWKhqyuYzqtN+H2AyKK6cl788IO/:9KWKh/Zqts2AJuQBO

MITRE ATT&CK Enterprise v15

Tasks