General

  • Target

    62e4722ac69321a0cea8bf6a2d10da922b0d958529eb614abb0e36e5d11f42fb

  • Size

    368KB

  • Sample

    241120-3mq3sawkdw

  • MD5

    d294c0de7c8d0a8ebe1834a467e9ca96

  • SHA1

    03240d28c1323377cb85467b7ef681084b34ce75

  • SHA256

    62e4722ac69321a0cea8bf6a2d10da922b0d958529eb614abb0e36e5d11f42fb

  • SHA512

    01c5404ccb0cc5a5a3e8f9a1d1a65d8697d4d91a774b7af8fb8db268a8d70e5e22f4f284e13902a2372b03eb31c40706529fdb8e6d01e7c695897096da7002bd

  • SSDEEP

    6144:AozjUrx4KVHa9eUfTLHygDVjfML+YSetEAlyb57P/z6GcNdJ8lGn:AoiHV8zpYSeXlyRnzpcNdCM

Malware Config

Extracted

Family

emotet

Botnet

Epoch3

C2

78.90.78.210:80

188.226.165.170:8080

188.40.170.197:80

51.38.50.144:8080

120.51.34.254:80

85.246.78.192:80

139.59.12.63:8080

46.105.131.68:8080

5.2.246.108:80

60.108.128.186:80

190.55.186.229:80

47.154.85.229:80

188.80.27.54:80

115.79.59.157:80

91.75.75.46:80

119.92.77.17:80

109.13.179.195:80

190.151.5.131:443

5.79.70.250:8080

175.103.38.146:80

rsa_pubkey.plain

Targets

    • Target

      62e4722ac69321a0cea8bf6a2d10da922b0d958529eb614abb0e36e5d11f42fb

    • Size

      368KB

    • MD5

      d294c0de7c8d0a8ebe1834a467e9ca96

    • SHA1

      03240d28c1323377cb85467b7ef681084b34ce75

    • SHA256

      62e4722ac69321a0cea8bf6a2d10da922b0d958529eb614abb0e36e5d11f42fb

    • SHA512

      01c5404ccb0cc5a5a3e8f9a1d1a65d8697d4d91a774b7af8fb8db268a8d70e5e22f4f284e13902a2372b03eb31c40706529fdb8e6d01e7c695897096da7002bd

    • SSDEEP

      6144:AozjUrx4KVHa9eUfTLHygDVjfML+YSetEAlyb57P/z6GcNdJ8lGn:AoiHV8zpYSeXlyRnzpcNdCM

MITRE ATT&CK Enterprise v15

Tasks