General

  • Target

    6c83416329ae63ed2e5f8c069f24bdd61a974a413a04281a614ae7e1d73844f2

  • Size

    219KB

  • Sample

    241121-a7b55sxgnn

  • MD5

    93bf45c72aa76e135f836d4d7f224196

  • SHA1

    a51a4a57ba3a7e94b657563fd2cdd8585d28683b

  • SHA256

    6c83416329ae63ed2e5f8c069f24bdd61a974a413a04281a614ae7e1d73844f2

  • SHA512

    20e4a6f9e2bee312cca24d4fc4b8ab761410f92ec59ae922147666788bab72ab0911b904c57fefe533c69875fc8e97896b9161ac45d384d84ea81fa95d8fdd54

  • SSDEEP

    6144:nXOAxKIiawQSu3IF9UtNRW9l1QAVzEAvv2OqsPa4HT0i4LFMEJf8Me5w6B:n0IiawQSu3IF9UtNRW9l1QAVzEU+OZ3D

Malware Config

Extracted

Family

emotet

Botnet

Epoch2

C2

67.163.161.107:80

107.170.146.252:8080

173.212.214.235:7080

167.114.153.111:8080

185.94.252.104:443

110.142.236.207:80

194.187.133.160:443

218.147.193.146:80

172.104.97.173:8080

216.139.123.119:80

50.91.114.38:80

202.134.4.211:8080

113.61.66.94:80

139.99.158.11:443

62.171.142.179:8080

37.139.21.175:8080

190.108.228.27:443

94.23.237.171:443

154.91.33.137:443

201.241.127.190:80

rsa_pubkey.plain

Targets

    • Target

      6c83416329ae63ed2e5f8c069f24bdd61a974a413a04281a614ae7e1d73844f2

    • Size

      219KB

    • MD5

      93bf45c72aa76e135f836d4d7f224196

    • SHA1

      a51a4a57ba3a7e94b657563fd2cdd8585d28683b

    • SHA256

      6c83416329ae63ed2e5f8c069f24bdd61a974a413a04281a614ae7e1d73844f2

    • SHA512

      20e4a6f9e2bee312cca24d4fc4b8ab761410f92ec59ae922147666788bab72ab0911b904c57fefe533c69875fc8e97896b9161ac45d384d84ea81fa95d8fdd54

    • SSDEEP

      6144:nXOAxKIiawQSu3IF9UtNRW9l1QAVzEAvv2OqsPa4HT0i4LFMEJf8Me5w6B:n0IiawQSu3IF9UtNRW9l1QAVzEU+OZ3D

MITRE ATT&CK Enterprise v15

Tasks