General

  • Target

    be4f8f532e258cf8851e590adf763fc79a810e7786c7812a1ad811ffa35ac6db

  • Size

    176KB

  • Sample

    241120-3fwppawfql

  • MD5

    67a18a48497174271465b3edf8a2f3fc

  • SHA1

    e38e04fec446df20daba0d82ac72201a426db6de

  • SHA256

    be4f8f532e258cf8851e590adf763fc79a810e7786c7812a1ad811ffa35ac6db

  • SHA512

    f4dd78feae573f5d15a7a7820fb8e800f6234026d6019c4ba9c1f0073220b0407990087a7ed1c3d36666ec6ec9763949d828ffff09e525441672b67cd2ae6c51

  • SSDEEP

    3072:RZfRVec5LR6mv9v1IIFpIXDsmA9n/+WKw/SRk0H5w6b:RRRocz6mvzTmApGrw/SOa/b

Malware Config

Extracted

Family

emotet

Botnet

Epoch1

C2

81.214.253.80:443

94.23.62.116:8080

98.103.204.12:443

59.148.253.194:8080

197.232.36.108:80

74.58.215.226:80

79.118.74.90:80

181.123.6.86:80

5.89.33.136:80

137.74.106.111:7080

189.223.16.99:80

187.162.248.237:80

181.61.182.143:80

129.232.220.11:8080

178.211.45.66:8080

45.33.77.42:8080

94.176.234.118:443

128.92.203.42:80

12.162.84.2:8080

212.71.237.140:8080

rsa_pubkey.plain

Targets

    • Target

      be4f8f532e258cf8851e590adf763fc79a810e7786c7812a1ad811ffa35ac6db

    • Size

      176KB

    • MD5

      67a18a48497174271465b3edf8a2f3fc

    • SHA1

      e38e04fec446df20daba0d82ac72201a426db6de

    • SHA256

      be4f8f532e258cf8851e590adf763fc79a810e7786c7812a1ad811ffa35ac6db

    • SHA512

      f4dd78feae573f5d15a7a7820fb8e800f6234026d6019c4ba9c1f0073220b0407990087a7ed1c3d36666ec6ec9763949d828ffff09e525441672b67cd2ae6c51

    • SSDEEP

      3072:RZfRVec5LR6mv9v1IIFpIXDsmA9n/+WKw/SRk0H5w6b:RRRocz6mvzTmApGrw/SOa/b

MITRE ATT&CK Enterprise v15

Tasks