General

  • Target

    d3687e4da3ddf92ab6a889fba2c18511cfe251471f74b11773ba73839ca6d728

  • Size

    341KB

  • Sample

    241120-z2fc2sxrfj

  • MD5

    51691ad9ea97c170142f14e7c1ab7662

  • SHA1

    3de1bcc0eabc95e4796ea94459cb66721c663582

  • SHA256

    d3687e4da3ddf92ab6a889fba2c18511cfe251471f74b11773ba73839ca6d728

  • SHA512

    5f60e01b8e08e02b430c7738d8f4e729f39e1afd12f25e764be81dbcb7360a3a1d0d15101d8605cb8e2d51270de5eb9e0f2965479ab9af5a6b926b944b9c4007

  • SSDEEP

    6144:BhJyYjnAtnunbIx0rW3PaItf4mLFXc6J3T3ulcpMzYS9ppD:9Iu8OWyItnDx+zYSXp

Malware Config

Extracted

Family

emotet

Botnet

Epoch1

C2

2.45.176.233:80

98.103.204.12:443

172.86.186.21:8080

192.175.111.214:8080

109.190.249.106:80

177.144.130.105:8080

70.32.84.74:8080

192.81.38.31:80

138.97.60.140:8080

189.223.16.99:80

175.143.12.123:8080

190.115.18.139:8080

170.81.48.2:80

5.196.35.138:7080

172.104.169.32:8080

178.250.54.208:8080

185.94.252.27:443

46.105.114.137:8080

79.118.74.90:80

70.169.17.134:80

rsa_pubkey.plain

Targets

    • Target

      d3687e4da3ddf92ab6a889fba2c18511cfe251471f74b11773ba73839ca6d728

    • Size

      341KB

    • MD5

      51691ad9ea97c170142f14e7c1ab7662

    • SHA1

      3de1bcc0eabc95e4796ea94459cb66721c663582

    • SHA256

      d3687e4da3ddf92ab6a889fba2c18511cfe251471f74b11773ba73839ca6d728

    • SHA512

      5f60e01b8e08e02b430c7738d8f4e729f39e1afd12f25e764be81dbcb7360a3a1d0d15101d8605cb8e2d51270de5eb9e0f2965479ab9af5a6b926b944b9c4007

    • SSDEEP

      6144:BhJyYjnAtnunbIx0rW3PaItf4mLFXc6J3T3ulcpMzYS9ppD:9Iu8OWyItnDx+zYSXp

MITRE ATT&CK Enterprise v15

Tasks