General

  • Target

    73336b4603b3b6e6413e67ecf4e10b359dfed7debd7546c3e0ad2a2b8e03bade

  • Size

    219KB

  • Sample

    241120-29xy6svrds

  • MD5

    c015b5fc55095a1ec6d616abe3cebd0f

  • SHA1

    4af4f6aa6896fd569beca23f71a88431f982660c

  • SHA256

    73336b4603b3b6e6413e67ecf4e10b359dfed7debd7546c3e0ad2a2b8e03bade

  • SHA512

    cced92cecafe4225be0cafa3a6ea579d645559c0991ac7e307e7a26b0a1cf5ab02339ea2e395ab3d2948b8eb8ff7eefb3b190c4947a0cf6fa9fc0cb3f88559cb

  • SSDEEP

    6144:nmOAxKIiawQSu3IF9UtNRW9l1QAVzEAvv2OqsPa4HT0i4LFMEJf8Me5w6B:nfIiawQSu3IF9UtNRW9l1QAVzEU+OZ3D

Malware Config

Extracted

Family

emotet

Botnet

Epoch2

C2

67.163.161.107:80

107.170.146.252:8080

173.212.214.235:7080

167.114.153.111:8080

185.94.252.104:443

110.142.236.207:80

194.187.133.160:443

218.147.193.146:80

172.104.97.173:8080

216.139.123.119:80

50.91.114.38:80

202.134.4.211:8080

113.61.66.94:80

139.99.158.11:443

62.171.142.179:8080

37.139.21.175:8080

190.108.228.27:443

94.23.237.171:443

154.91.33.137:443

201.241.127.190:80

rsa_pubkey.plain

Targets

    • Target

      73336b4603b3b6e6413e67ecf4e10b359dfed7debd7546c3e0ad2a2b8e03bade

    • Size

      219KB

    • MD5

      c015b5fc55095a1ec6d616abe3cebd0f

    • SHA1

      4af4f6aa6896fd569beca23f71a88431f982660c

    • SHA256

      73336b4603b3b6e6413e67ecf4e10b359dfed7debd7546c3e0ad2a2b8e03bade

    • SHA512

      cced92cecafe4225be0cafa3a6ea579d645559c0991ac7e307e7a26b0a1cf5ab02339ea2e395ab3d2948b8eb8ff7eefb3b190c4947a0cf6fa9fc0cb3f88559cb

    • SSDEEP

      6144:nmOAxKIiawQSu3IF9UtNRW9l1QAVzEAvv2OqsPa4HT0i4LFMEJf8Me5w6B:nfIiawQSu3IF9UtNRW9l1QAVzEU+OZ3D

MITRE ATT&CK Enterprise v15

Tasks