General

  • Target

    568a34d45a0da0b6c5923f78ff94788dbc0891ff2b778de7cbbb5e8cb468819e

  • Size

    585KB

  • Sample

    241120-y8y83aspby

  • MD5

    956ae40a6edabcffbaa9551a39ff9463

  • SHA1

    950db25edf31606f1a35df4c3f43347d7cef1f4c

  • SHA256

    568a34d45a0da0b6c5923f78ff94788dbc0891ff2b778de7cbbb5e8cb468819e

  • SHA512

    31fcb71ab3db5822e1f0ee92f785441ec420887e9f4ca6a04c6c57be289d3b319cfe969daae635e709239134aa51b8c85b8d1a1272dc631492062ef0e6d3f12e

  • SSDEEP

    12288:vocAHzfdBuh0PBGEhq6FJxJ/3UEoiMx3:ZAT1BWEtBVUNiMJ

Malware Config

Extracted

Family

emotet

Botnet

Epoch5

C2

202.28.34.99:8080

80.211.107.116:8080

175.126.176.79:8080

218.38.121.17:443

139.196.72.155:8080

103.71.99.57:8080

87.106.97.83:7080

178.62.112.199:8080

64.227.55.231:8080

46.101.98.60:8080

54.37.228.122:443

128.199.217.206:443

190.145.8.4:443

209.239.112.82:8080

85.214.67.203:8080

198.199.70.22:8080

128.199.242.164:8080

178.238.225.252:8080

103.85.95.4:8080

103.126.216.86:443

eck1.plain
ecs1.plain

Targets

    • Target

      568a34d45a0da0b6c5923f78ff94788dbc0891ff2b778de7cbbb5e8cb468819e

    • Size

      585KB

    • MD5

      956ae40a6edabcffbaa9551a39ff9463

    • SHA1

      950db25edf31606f1a35df4c3f43347d7cef1f4c

    • SHA256

      568a34d45a0da0b6c5923f78ff94788dbc0891ff2b778de7cbbb5e8cb468819e

    • SHA512

      31fcb71ab3db5822e1f0ee92f785441ec420887e9f4ca6a04c6c57be289d3b319cfe969daae635e709239134aa51b8c85b8d1a1272dc631492062ef0e6d3f12e

    • SSDEEP

      12288:vocAHzfdBuh0PBGEhq6FJxJ/3UEoiMx3:ZAT1BWEtBVUNiMJ

MITRE ATT&CK Matrix

Tasks