General

  • Target

    6f1aaa456b319271e7dba3fce35043780dcd9bc552e65d69906b5d67133170ca

  • Size

    392KB

  • Sample

    241120-2e52asvlfv

  • MD5

    9941948eab265473b4a99346b48b10c0

  • SHA1

    30f6d411b331768bef5d51f1d0c4e96b4b12d896

  • SHA256

    6f1aaa456b319271e7dba3fce35043780dcd9bc552e65d69906b5d67133170ca

  • SHA512

    06c65db1882e401888edc5e279a89268bb16b7d9089ee17ab004db161628e1ec97b6e499126e6fb2044967ec2fab99161e596ce25456ebae58e4d11a84d189f3

  • SSDEEP

    6144:vsAXvtkXZjPfQ72jfw9LZ3fUIKonW1WAEgjrqVqbiQ6OiW:vZftkJjXCU8Z3cfoIEqf6

Malware Config

Extracted

Family

emotet

Botnet

Epoch1

C2

73.116.193.136:80

185.94.252.13:443

149.62.173.247:8080

89.32.150.160:8080

185.94.252.12:80

77.90.136.129:8080

83.169.21.32:7080

104.236.161.64:8080

114.109.179.60:80

189.2.177.210:443

68.183.190.199:8080

144.139.91.187:443

185.94.252.27:443

190.181.235.46:80

82.196.15.205:8080

46.28.111.142:7080

181.167.96.215:80

202.62.39.111:80

219.92.13.25:80

191.99.160.58:80

rsa_pubkey.plain

Targets

    • Target

      6f1aaa456b319271e7dba3fce35043780dcd9bc552e65d69906b5d67133170ca

    • Size

      392KB

    • MD5

      9941948eab265473b4a99346b48b10c0

    • SHA1

      30f6d411b331768bef5d51f1d0c4e96b4b12d896

    • SHA256

      6f1aaa456b319271e7dba3fce35043780dcd9bc552e65d69906b5d67133170ca

    • SHA512

      06c65db1882e401888edc5e279a89268bb16b7d9089ee17ab004db161628e1ec97b6e499126e6fb2044967ec2fab99161e596ce25456ebae58e4d11a84d189f3

    • SSDEEP

      6144:vsAXvtkXZjPfQ72jfw9LZ3fUIKonW1WAEgjrqVqbiQ6OiW:vZftkJjXCU8Z3cfoIEqf6

MITRE ATT&CK Enterprise v15

Tasks