General

  • Target

    e1089bd6432d1d15fdb7b2f14bb45921ed62ddfbc54e6ff70a7eba3d2cba2254

  • Size

    543KB

  • Sample

    241120-3hj4nszqbr

  • MD5

    5e0abcdb573c9e3511144d121b641617

  • SHA1

    86f4acfc91c10e92f339c3589f09da95d0192d98

  • SHA256

    e1089bd6432d1d15fdb7b2f14bb45921ed62ddfbc54e6ff70a7eba3d2cba2254

  • SHA512

    4ac00d10fd605ee1a5b72c61b57f00d99150540cdca5b48e3f7ea63cbc866ef3861f83971638fe3212b518d0750c769ea978decd76c601d28605adb91925836a

  • SSDEEP

    6144:JhZ02GdOOgPY3KUUAKM4cLuCKhS4OzJ1fyoogcK1GF2sD18e2k6SV4s68dTcEgDX:JhFfgKRM4c6CeOFzLcQUZvqXmI4For

Malware Config

Extracted

Family

emotet

Botnet

Epoch4

C2

176.31.73.90:443

45.76.159.214:8080

138.197.147.101:443

104.168.154.79:8080

149.56.131.28:8080

5.9.116.246:8080

77.81.247.144:8080

172.104.251.154:8080

50.30.40.196:8080

173.212.193.249:8080

51.91.76.89:8080

197.242.150.244:8080

103.75.201.2:443

51.254.140.238:7080

79.137.35.198:8080

72.15.201.15:8080

27.54.89.58:8080

189.126.111.200:7080

196.218.30.83:443

82.165.152.127:8080

eck1.plain
ecs1.plain

Targets

    • Target

      e1089bd6432d1d15fdb7b2f14bb45921ed62ddfbc54e6ff70a7eba3d2cba2254

    • Size

      543KB

    • MD5

      5e0abcdb573c9e3511144d121b641617

    • SHA1

      86f4acfc91c10e92f339c3589f09da95d0192d98

    • SHA256

      e1089bd6432d1d15fdb7b2f14bb45921ed62ddfbc54e6ff70a7eba3d2cba2254

    • SHA512

      4ac00d10fd605ee1a5b72c61b57f00d99150540cdca5b48e3f7ea63cbc866ef3861f83971638fe3212b518d0750c769ea978decd76c601d28605adb91925836a

    • SSDEEP

      6144:JhZ02GdOOgPY3KUUAKM4cLuCKhS4OzJ1fyoogcK1GF2sD18e2k6SV4s68dTcEgDX:JhFfgKRM4c6CeOFzLcQUZvqXmI4For

MITRE ATT&CK Matrix

Tasks