General

  • Target

    0c3e28864c508f16efb9bdfe80bacf91f2b9eb6b310f66cabf2f006c53619194

  • Size

    840KB

  • Sample

    241120-3ztdnsxamq

  • MD5

    7d3f126d9c4e887b2d0dc7f9843becd7

  • SHA1

    16a333316b92b163af2c28a9e4ef9bf5c54d1ff0

  • SHA256

    0c3e28864c508f16efb9bdfe80bacf91f2b9eb6b310f66cabf2f006c53619194

  • SHA512

    5925c87ef50a5f1f45195e6dca22f31da9c27508da89be959fdc4b1f072fdb3ebdcf78ddbeaf72cf88ebe10cfcef254da0eabb8c977b69728ee77c6c7357eae3

  • SSDEEP

    12288:J0iTg1PU3G0r96SDEL28tH/9OpeqDfFOezePWAef7oGaIwXCzlalnryV:CiTg9U3G0ISDKvSeqf4aePWAy7kUst

Malware Config

Extracted

Family

emotet

Botnet

Epoch4

C2

51.254.140.238:7080

103.70.28.102:8080

5.9.116.246:8080

1.234.2.232:8080

209.250.246.206:443

58.227.42.236:80

72.15.201.15:8080

159.65.88.10:8080

189.126.111.200:7080

173.212.193.249:8080

188.44.20.25:443

134.122.66.193:8080

172.104.251.154:8080

103.75.201.2:443

150.95.66.124:8080

153.126.146.25:7080

103.43.75.120:443

203.114.109.124:443

27.54.89.58:8080

1.234.21.73:7080

ecs1.plain
eck1.plain

Targets

    • Target

      0c3e28864c508f16efb9bdfe80bacf91f2b9eb6b310f66cabf2f006c53619194

    • Size

      840KB

    • MD5

      7d3f126d9c4e887b2d0dc7f9843becd7

    • SHA1

      16a333316b92b163af2c28a9e4ef9bf5c54d1ff0

    • SHA256

      0c3e28864c508f16efb9bdfe80bacf91f2b9eb6b310f66cabf2f006c53619194

    • SHA512

      5925c87ef50a5f1f45195e6dca22f31da9c27508da89be959fdc4b1f072fdb3ebdcf78ddbeaf72cf88ebe10cfcef254da0eabb8c977b69728ee77c6c7357eae3

    • SSDEEP

      12288:J0iTg1PU3G0r96SDEL28tH/9OpeqDfFOezePWAef7oGaIwXCzlalnryV:CiTg9U3G0ISDKvSeqf4aePWAy7kUst

MITRE ATT&CK Matrix

Tasks