General

  • Target

    501bb64d44da18837dd27142ac281eff19cd99424be2b4fb684490294a3c4d25

  • Size

    501KB

  • Sample

    241120-28dh5sweml

  • MD5

    0aceb2b42dbd8fa7aeae60a0d3d963ec

  • SHA1

    7543f27a49917ccf6b54ef48e0d54b8629d3ac47

  • SHA256

    501bb64d44da18837dd27142ac281eff19cd99424be2b4fb684490294a3c4d25

  • SHA512

    ba2838976b8349804b8bebed2dbd80862c8a6f559a5f7459e1c8b54ba5bd21825944e001d8ec50b60a570757a9b9694f1a870b3eeb015daae478c37e8e9cccf9

  • SSDEEP

    6144:iuD3jumQgXW2jLi1QPy+hSVL+ymiohaJdtUPM1UlTIqNtF1FMytrf:ZDLVXW2j21QC1+yZogtUPMg9Z1FMyB

Malware Config

Extracted

Family

emotet

Botnet

Epoch4

C2

209.250.246.206:443

110.232.117.186:8080

164.68.99.3:8080

119.193.124.41:7080

212.237.17.99:8080

107.182.225.142:8080

185.8.212.130:7080

153.126.146.25:7080

77.81.247.144:8080

209.126.98.206:8080

201.94.166.162:443

131.100.24.231:80

45.235.8.30:8080

213.241.20.155:443

103.43.46.182:443

129.232.188.93:443

103.132.242.26:8080

151.106.112.196:8080

45.118.115.99:8080

185.4.135.165:8080

ecs1.plain
eck1.plain

Extracted

Family

emotet

C2

110.232.117.186:8080

119.193.124.41:7080

212.237.17.99:8080

107.182.225.142:8080

185.8.212.130:7080

77.81.247.144:8080

131.100.24.231:80

45.235.8.30:8080

103.43.46.182:443

129.232.188.93:443

103.132.242.26:8080

151.106.112.196:8080

45.118.115.99:8080

103.70.28.102:8080

27.54.89.58:8080

196.218.30.83:443

173.212.193.249:8080

203.114.109.124:443

102.222.215.74:443

158.69.222.101:443

Targets

    • Target

      501bb64d44da18837dd27142ac281eff19cd99424be2b4fb684490294a3c4d25

    • Size

      501KB

    • MD5

      0aceb2b42dbd8fa7aeae60a0d3d963ec

    • SHA1

      7543f27a49917ccf6b54ef48e0d54b8629d3ac47

    • SHA256

      501bb64d44da18837dd27142ac281eff19cd99424be2b4fb684490294a3c4d25

    • SHA512

      ba2838976b8349804b8bebed2dbd80862c8a6f559a5f7459e1c8b54ba5bd21825944e001d8ec50b60a570757a9b9694f1a870b3eeb015daae478c37e8e9cccf9

    • SSDEEP

      6144:iuD3jumQgXW2jLi1QPy+hSVL+ymiohaJdtUPM1UlTIqNtF1FMytrf:ZDLVXW2j21QC1+yZogtUPMg9Z1FMyB

MITRE ATT&CK Matrix

Tasks