General

  • Target

    b1198c40b6a58a16b15393970729f1f964e5bdf2a69e99c18b44749d5dc9a8d2

  • Size

    416KB

  • Sample

    241120-3q6yeawara

  • MD5

    188fd882bb8e4ff90eaf4e8d26572b2b

  • SHA1

    41d559b7ccb081fc4ddd928dd775cd00e0fcff76

  • SHA256

    b1198c40b6a58a16b15393970729f1f964e5bdf2a69e99c18b44749d5dc9a8d2

  • SHA512

    9684d4c7b83eabcf8a1c3cf107236bcb6ce5c9af863dbad9b5c8356b3b6fcfb004ffd1ecc07bf7bf666c5589ade09e968df4bed7c3698ddc00e7ee35b48c9f5d

  • SSDEEP

    12288:0XsObgCuH3bm4vOJzet0t/tVtJtkBN51on:0zMCuH7OJzM1I

Malware Config

Extracted

Family

emotet

Botnet

Epoch2

C2

88.153.35.32:80

107.170.146.252:8080

173.212.214.235:7080

167.114.153.111:8080

67.170.250.203:443

121.124.124.40:7080

103.86.49.11:8080

74.214.230.200:80

194.187.133.160:443

172.104.97.173:8080

172.91.208.86:80

200.116.145.225:443

202.134.4.216:8080

172.105.13.66:443

190.164.104.62:80

50.35.17.13:80

176.111.60.55:8080

201.241.127.190:80

66.76.12.94:8080

95.213.236.64:8080

rsa_pubkey.plain

Targets

    • Target

      b1198c40b6a58a16b15393970729f1f964e5bdf2a69e99c18b44749d5dc9a8d2

    • Size

      416KB

    • MD5

      188fd882bb8e4ff90eaf4e8d26572b2b

    • SHA1

      41d559b7ccb081fc4ddd928dd775cd00e0fcff76

    • SHA256

      b1198c40b6a58a16b15393970729f1f964e5bdf2a69e99c18b44749d5dc9a8d2

    • SHA512

      9684d4c7b83eabcf8a1c3cf107236bcb6ce5c9af863dbad9b5c8356b3b6fcfb004ffd1ecc07bf7bf666c5589ade09e968df4bed7c3698ddc00e7ee35b48c9f5d

    • SSDEEP

      12288:0XsObgCuH3bm4vOJzet0t/tVtJtkBN51on:0zMCuH7OJzM1I

MITRE ATT&CK Enterprise v15

Tasks