General

  • Target

    23ea74a5a9a3a6c7f4384f149bb449f15fb908f8600ce0c35af6cbf18a6ec145

  • Size

    547KB

  • Sample

    241120-z5j6eatapb

  • MD5

    8e628fcfcdf921139391328e60f20129

  • SHA1

    8c3c1cebf995a8cc5014c04bbf0693566958ca5e

  • SHA256

    23ea74a5a9a3a6c7f4384f149bb449f15fb908f8600ce0c35af6cbf18a6ec145

  • SHA512

    2ddb15125bd829e02529348458e2cd54db32505adb20e5916906b8a4debc909d11cfdbcd5612cd558628b691909283698510f5ba266c879a1da771b71255d4ec

  • SSDEEP

    12288:z3MzbgCeHXbGyHmJTitEt/tVtJtUWZfHMoXaCeG4UzX:zOsCeHJmJT/9XaCeGV

Malware Config

Extracted

Family

emotet

Botnet

Epoch1

C2

78.206.229.130:80

104.131.92.244:8080

70.39.251.94:8080

87.230.25.43:8080

79.118.74.90:80

82.76.111.249:443

82.76.52.155:80

212.71.237.140:8080

188.251.213.180:80

103.236.179.162:80

1.226.84.243:8080

70.32.84.74:8080

2.84.12.98:80

201.213.177.139:80

177.73.0.98:443

170.81.48.2:80

129.232.220.11:8080

177.144.130.105:8080

213.52.74.198:80

120.72.18.91:80

rsa_pubkey.plain

Targets

    • Target

      23ea74a5a9a3a6c7f4384f149bb449f15fb908f8600ce0c35af6cbf18a6ec145

    • Size

      547KB

    • MD5

      8e628fcfcdf921139391328e60f20129

    • SHA1

      8c3c1cebf995a8cc5014c04bbf0693566958ca5e

    • SHA256

      23ea74a5a9a3a6c7f4384f149bb449f15fb908f8600ce0c35af6cbf18a6ec145

    • SHA512

      2ddb15125bd829e02529348458e2cd54db32505adb20e5916906b8a4debc909d11cfdbcd5612cd558628b691909283698510f5ba266c879a1da771b71255d4ec

    • SSDEEP

      12288:z3MzbgCeHXbGyHmJTitEt/tVtJtUWZfHMoXaCeG4UzX:zOsCeHJmJT/9XaCeGV

MITRE ATT&CK Enterprise v15

Tasks