General

  • Target

    cb5384b3b34b8d7a4704e8c5ffb7d72b8db2aa9bc6ceffbd0eb79ea31ab8a186

  • Size

    580KB

  • Sample

    241121-ak31caxcnr

  • MD5

    e1dfe4118c78c1d084f5eeebbcbd8e16

  • SHA1

    d7d84bcf8c5cadb25ae98b2d90e588d9290c6e00

  • SHA256

    cb5384b3b34b8d7a4704e8c5ffb7d72b8db2aa9bc6ceffbd0eb79ea31ab8a186

  • SHA512

    36cf5e8aaf52043ec4fc585f35461d357c9bf13f24d5d155e37ed5ed29ca66226df5ea8057f477db2c16c6126ae55cf95e8452b54436ef3a34713225f4f6978a

  • SSDEEP

    12288:dIcc2PAC1JB9aaWlI+5rGN6IMP1ZFb2ROyyrsZn9M/gIAZVoS/fd:dIcc2LB9aaMIWJ2Uyyrmn9MoIA3n

Malware Config

Extracted

Family

emotet

Botnet

Epoch4

C2

164.68.99.3:8080

146.59.226.45:443

51.91.76.89:8080

209.97.163.214:443

158.69.222.101:443

82.165.152.127:8080

103.70.28.102:8080

72.15.201.15:8080

150.95.66.124:8080

45.176.232.124:443

82.223.21.224:8080

107.170.39.149:8080

160.16.142.56:8080

103.132.242.26:8080

153.126.146.25:7080

213.241.20.155:443

1.234.21.73:7080

197.242.150.244:8080

188.44.20.25:443

196.218.30.83:443

ecs1.plain
eck1.plain

Targets

    • Target

      cb5384b3b34b8d7a4704e8c5ffb7d72b8db2aa9bc6ceffbd0eb79ea31ab8a186

    • Size

      580KB

    • MD5

      e1dfe4118c78c1d084f5eeebbcbd8e16

    • SHA1

      d7d84bcf8c5cadb25ae98b2d90e588d9290c6e00

    • SHA256

      cb5384b3b34b8d7a4704e8c5ffb7d72b8db2aa9bc6ceffbd0eb79ea31ab8a186

    • SHA512

      36cf5e8aaf52043ec4fc585f35461d357c9bf13f24d5d155e37ed5ed29ca66226df5ea8057f477db2c16c6126ae55cf95e8452b54436ef3a34713225f4f6978a

    • SSDEEP

      12288:dIcc2PAC1JB9aaWlI+5rGN6IMP1ZFb2ROyyrsZn9M/gIAZVoS/fd:dIcc2LB9aaMIWJ2Uyyrmn9MoIA3n

MITRE ATT&CK Matrix

Tasks