General

  • Target

    8d36215ed17aee455fc31b359b50f7525e668118ce8bb545c1597285833ac5cd

  • Size

    880KB

  • Sample

    241120-3fz24szphn

  • MD5

    25e027a166eecd28e8d30a319349054c

  • SHA1

    86b70a7d298db898742bca135ca8b0f49da33819

  • SHA256

    8d36215ed17aee455fc31b359b50f7525e668118ce8bb545c1597285833ac5cd

  • SHA512

    3dcde0f06c5c3f6cb023e4ef8fc0b99c28a2bf2ef03c12349c3a0a81b0c1702a0ddecf8cff02fc2e72e2251d7ccb322bd908b8f339d1b6c2080c2fbc2f5fe5c3

  • SSDEEP

    12288:mgObnVOPqdLK9tHsLKUC20L/UOm8q0T6GS9o+aRna:VFTtL/e8qO6Gfna

Malware Config

Extracted

Family

emotet

Botnet

Epoch1

C2

177.73.0.98:443

185.94.252.13:443

94.176.234.118:443

212.71.237.140:8080

186.250.52.226:8080

143.0.87.101:80

187.51.47.26:80

190.181.235.46:80

212.231.60.98:80

45.161.242.102:80

50.28.51.143:8080

190.96.118.251:443

46.214.11.172:80

186.70.127.199:8090

157.7.199.53:8080

217.13.106.14:8080

187.162.248.237:80

177.144.135.2:80

181.30.69.50:80

190.163.31.26:80

rsa_pubkey.plain

Targets

    • Target

      8d36215ed17aee455fc31b359b50f7525e668118ce8bb545c1597285833ac5cd

    • Size

      880KB

    • MD5

      25e027a166eecd28e8d30a319349054c

    • SHA1

      86b70a7d298db898742bca135ca8b0f49da33819

    • SHA256

      8d36215ed17aee455fc31b359b50f7525e668118ce8bb545c1597285833ac5cd

    • SHA512

      3dcde0f06c5c3f6cb023e4ef8fc0b99c28a2bf2ef03c12349c3a0a81b0c1702a0ddecf8cff02fc2e72e2251d7ccb322bd908b8f339d1b6c2080c2fbc2f5fe5c3

    • SSDEEP

      12288:mgObnVOPqdLK9tHsLKUC20L/UOm8q0T6GS9o+aRna:VFTtL/e8qO6Gfna

MITRE ATT&CK Enterprise v15

Tasks