General

  • Target

    3d5622295b5d0038e11198a605dbaf6a87c36a07b7cbe49885add309d64b7765

  • Size

    156KB

  • Sample

    241120-2h875avmby

  • MD5

    6491730d8e7e591684eda0379bc641b2

  • SHA1

    dad2ba5af2d4a030ac8067e62fdaac0a7daddf1e

  • SHA256

    3d5622295b5d0038e11198a605dbaf6a87c36a07b7cbe49885add309d64b7765

  • SHA512

    e3e84a43a33e1f4978daccefea14dee82e102668d8ac47911621f6431b22dbb677d53c05f4c9ff3b6d45222bc59316acfb3cbce2ffad3dafae8fdff4e3a20673

  • SSDEEP

    1536:U/snyRsQ4HuOfh0gooSleENaBEV9WMIJ6HvldJCdtaCD81auc8j0BDQnJ:ksnyRUnh0gooSleENOEV9WMndqd0/

Malware Config

Extracted

Family

emotet

Botnet

Epoch1

C2

185.215.227.107:443

51.38.124.206:80

38.88.126.202:8080

54.37.42.48:8080

172.104.169.32:8080

68.183.190.199:8080

187.162.248.237:80

82.76.111.249:443

184.66.18.83:80

190.6.193.152:8080

77.238.212.227:80

199.203.62.165:80

188.2.217.94:80

185.94.252.12:80

178.250.54.208:8080

206.15.68.237:443

65.36.62.20:80

216.47.196.104:80

219.92.8.17:8080

213.60.96.117:80

rsa_pubkey.plain

Targets

    • Target

      3d5622295b5d0038e11198a605dbaf6a87c36a07b7cbe49885add309d64b7765

    • Size

      156KB

    • MD5

      6491730d8e7e591684eda0379bc641b2

    • SHA1

      dad2ba5af2d4a030ac8067e62fdaac0a7daddf1e

    • SHA256

      3d5622295b5d0038e11198a605dbaf6a87c36a07b7cbe49885add309d64b7765

    • SHA512

      e3e84a43a33e1f4978daccefea14dee82e102668d8ac47911621f6431b22dbb677d53c05f4c9ff3b6d45222bc59316acfb3cbce2ffad3dafae8fdff4e3a20673

    • SSDEEP

      1536:U/snyRsQ4HuOfh0gooSleENaBEV9WMIJ6HvldJCdtaCD81auc8j0BDQnJ:ksnyRUnh0gooSleENOEV9WMndqd0/

MITRE ATT&CK Enterprise v15

Tasks