General

  • Target

    2fbaf38a38c7c22f1c4a2eae3dd29af2fb71a72878801a28b990d9f1e31b5e2e

  • Size

    219KB

  • Sample

    241120-3y685swmct

  • MD5

    e3394a928c17321ef30cb0a17ec6e13b

  • SHA1

    e6044697f54d4068f8746de2b85434a908498d86

  • SHA256

    2fbaf38a38c7c22f1c4a2eae3dd29af2fb71a72878801a28b990d9f1e31b5e2e

  • SHA512

    ef996d90babce8ff450f5aa5f9e83b2b10520b4745b72aa2f5537d5a26e6d39cf7336385087735759ca758decb2b960fd566c00d8348957a711e5049443b7054

  • SSDEEP

    6144:neOAxKIiawQSu3IF9UtNRW9l1QAVzEAvv2OqsPa4HT0i4LFMEJf8Me5w6B:nHIiawQSu3IF9UtNRW9l1QAVzEU+OZ3D

Malware Config

Extracted

Family

emotet

Botnet

Epoch2

C2

67.163.161.107:80

107.170.146.252:8080

173.212.214.235:7080

167.114.153.111:8080

185.94.252.104:443

110.142.236.207:80

194.187.133.160:443

218.147.193.146:80

172.104.97.173:8080

216.139.123.119:80

50.91.114.38:80

202.134.4.211:8080

113.61.66.94:80

139.99.158.11:443

62.171.142.179:8080

37.139.21.175:8080

190.108.228.27:443

94.23.237.171:443

154.91.33.137:443

201.241.127.190:80

rsa_pubkey.plain

Targets

    • Target

      2fbaf38a38c7c22f1c4a2eae3dd29af2fb71a72878801a28b990d9f1e31b5e2e

    • Size

      219KB

    • MD5

      e3394a928c17321ef30cb0a17ec6e13b

    • SHA1

      e6044697f54d4068f8746de2b85434a908498d86

    • SHA256

      2fbaf38a38c7c22f1c4a2eae3dd29af2fb71a72878801a28b990d9f1e31b5e2e

    • SHA512

      ef996d90babce8ff450f5aa5f9e83b2b10520b4745b72aa2f5537d5a26e6d39cf7336385087735759ca758decb2b960fd566c00d8348957a711e5049443b7054

    • SSDEEP

      6144:neOAxKIiawQSu3IF9UtNRW9l1QAVzEAvv2OqsPa4HT0i4LFMEJf8Me5w6B:nHIiawQSu3IF9UtNRW9l1QAVzEU+OZ3D

MITRE ATT&CK Enterprise v15

Tasks