General

  • Target

    8b65cd706f6715e3cccca5008ffc3ddf924861884874b79bba0fa6533e3953c3

  • Size

    176KB

  • Sample

    241121-aewn3swdmh

  • MD5

    64e259c16c2890e145991eeee1942bbd

  • SHA1

    34aaa1de0c22bff49f801c054749fea201a46e7e

  • SHA256

    8b65cd706f6715e3cccca5008ffc3ddf924861884874b79bba0fa6533e3953c3

  • SHA512

    c7595414762bcf9a8b87f78bdd7c43e2df32d7dca4ce982c8d125f7bd44d7042035cc583fdd0e5f1e60df160ba79566b632117c432a57dcfc6a779fee547e02a

  • SSDEEP

    3072:RZfRVec5LR6mv9v1lIFpIXDsmA9n/+WKw/SRk0H5w6b:RRRocz6mvzUmApGrw/SOa/b

Malware Config

Extracted

Family

emotet

Botnet

Epoch1

C2

81.214.253.80:443

94.23.62.116:8080

98.103.204.12:443

59.148.253.194:8080

197.232.36.108:80

74.58.215.226:80

79.118.74.90:80

181.123.6.86:80

5.89.33.136:80

137.74.106.111:7080

189.223.16.99:80

187.162.248.237:80

181.61.182.143:80

129.232.220.11:8080

178.211.45.66:8080

45.33.77.42:8080

94.176.234.118:443

128.92.203.42:80

12.162.84.2:8080

212.71.237.140:8080

rsa_pubkey.plain

Targets

    • Target

      8b65cd706f6715e3cccca5008ffc3ddf924861884874b79bba0fa6533e3953c3

    • Size

      176KB

    • MD5

      64e259c16c2890e145991eeee1942bbd

    • SHA1

      34aaa1de0c22bff49f801c054749fea201a46e7e

    • SHA256

      8b65cd706f6715e3cccca5008ffc3ddf924861884874b79bba0fa6533e3953c3

    • SHA512

      c7595414762bcf9a8b87f78bdd7c43e2df32d7dca4ce982c8d125f7bd44d7042035cc583fdd0e5f1e60df160ba79566b632117c432a57dcfc6a779fee547e02a

    • SSDEEP

      3072:RZfRVec5LR6mv9v1lIFpIXDsmA9n/+WKw/SRk0H5w6b:RRRocz6mvzUmApGrw/SOa/b

MITRE ATT&CK Enterprise v15

Tasks