General

  • Target

    8de2e2cf463a471509f3dfeac535923445474df2e585204e1f9ae481649532e3

  • Size

    494KB

  • Sample

    241120-y7j3rasnhv

  • MD5

    e1b1fdd2d9926e0a11d46580cd1dcb8b

  • SHA1

    58efa8b3230dbec6e3dcc07c64a3559da750d1e0

  • SHA256

    8de2e2cf463a471509f3dfeac535923445474df2e585204e1f9ae481649532e3

  • SHA512

    1bd696cf211e97820854760faba7912428eae9eaec68f5150e10253ff785431318ad6d7f993899cea5236eed3eece9af460b6054940a5c8e75ac50906440047b

  • SSDEEP

    12288:QBRO3X4VRny1A7EA+AZNCZf9LoVAei6Z:QBRM4VRnXEAzyZVLoVBi

Malware Config

Extracted

Family

emotet

Botnet

Epoch4

C2

209.15.236.39:8080

162.244.80.68:443

195.154.253.60:8080

31.24.158.56:8080

209.126.98.206:8080

45.142.114.231:8080

159.8.59.82:8080

159.65.88.10:8080

82.165.152.127:8080

1.234.2.232:8080

178.79.147.66:8080

103.75.201.4:443

131.100.24.231:80

129.232.188.93:443

173.212.193.249:8080

107.182.225.142:8080

103.134.85.85:80

176.104.106.96:8080

203.114.109.124:443

216.158.226.206:443

eck1.plain
ecs1.plain

Targets

    • Target

      8de2e2cf463a471509f3dfeac535923445474df2e585204e1f9ae481649532e3

    • Size

      494KB

    • MD5

      e1b1fdd2d9926e0a11d46580cd1dcb8b

    • SHA1

      58efa8b3230dbec6e3dcc07c64a3559da750d1e0

    • SHA256

      8de2e2cf463a471509f3dfeac535923445474df2e585204e1f9ae481649532e3

    • SHA512

      1bd696cf211e97820854760faba7912428eae9eaec68f5150e10253ff785431318ad6d7f993899cea5236eed3eece9af460b6054940a5c8e75ac50906440047b

    • SSDEEP

      12288:QBRO3X4VRny1A7EA+AZNCZf9LoVAei6Z:QBRM4VRnXEAzyZVLoVBi

MITRE ATT&CK Enterprise v15

Tasks