General

  • Target

    842c52af00a6db81906a18628995a0ce7654a763ac06752ced96ebf920b7bbf1

  • Size

    618KB

  • Sample

    241121-alp5wa1maq

  • MD5

    f467cc9bd1d8ab34d2ef2bc2ad835959

  • SHA1

    827e17d39eb73c4ee816237b40d0188cfa71595b

  • SHA256

    842c52af00a6db81906a18628995a0ce7654a763ac06752ced96ebf920b7bbf1

  • SHA512

    26ccaf34b52decf3d31dce38097b9196e3df78ecc9845a5a989b6bfe3def1790bf1c6eeb01476f96fe20994eb0eb8628b1fecf048c090283540b85f543d8e44c

  • SSDEEP

    12288:tkDwmoShmmp3EPCZG1UrIujTQSk+wn0Y4GBinko/4GCGKyZDE93AbWxPPywg:tWnhDp5GOrZjT/USING5E93AbW1+

Malware Config

Extracted

Family

emotet

Botnet

Epoch1

C2

200.59.6.174:80

59.148.253.194:8080

173.212.197.71:8080

98.103.204.12:443

192.232.229.54:7080

185.94.252.12:80

74.135.120.91:80

5.189.178.202:8080

202.134.4.210:7080

181.129.96.162:8080

70.32.84.74:8080

190.190.219.184:80

178.250.54.208:8080

94.176.234.118:443

76.121.199.225:80

191.97.154.2:80

46.101.58.37:8080

103.236.179.162:80

217.13.106.14:8080

82.76.111.249:443

rsa_pubkey.plain

Targets

    • Target

      842c52af00a6db81906a18628995a0ce7654a763ac06752ced96ebf920b7bbf1

    • Size

      618KB

    • MD5

      f467cc9bd1d8ab34d2ef2bc2ad835959

    • SHA1

      827e17d39eb73c4ee816237b40d0188cfa71595b

    • SHA256

      842c52af00a6db81906a18628995a0ce7654a763ac06752ced96ebf920b7bbf1

    • SHA512

      26ccaf34b52decf3d31dce38097b9196e3df78ecc9845a5a989b6bfe3def1790bf1c6eeb01476f96fe20994eb0eb8628b1fecf048c090283540b85f543d8e44c

    • SSDEEP

      12288:tkDwmoShmmp3EPCZG1UrIujTQSk+wn0Y4GBinko/4GCGKyZDE93AbWxPPywg:tWnhDp5GOrZjT/USING5E93AbW1+

MITRE ATT&CK Enterprise v15

Tasks