General

  • Target

    c520069c9a5f010b2c81afeb1c758a4e14e6800da74bf5e70cec6299c0fcddd2

  • Size

    848KB

  • Sample

    241121-alrnpswpf1

  • MD5

    a9ffe14d9c5f19f013e644f07c464e10

  • SHA1

    0d42db369267af0a9dff60690604578d6a2f16a0

  • SHA256

    c520069c9a5f010b2c81afeb1c758a4e14e6800da74bf5e70cec6299c0fcddd2

  • SHA512

    08b2ce1d09a7c2818a971219e1aac64b5507829470443105992eadec6efc8c5b72d19b055602e8704c012b3006efb150ea8690567fb5d4e85398f3075fcfb67c

  • SSDEEP

    6144:spOLPiioP4UqgzLc6c6c6c6c6c6c6c6c6csI+7L1NIDK:spu44gL

Malware Config

Extracted

Family

emotet

Botnet

Epoch1

C2

216.10.40.16:80

91.121.54.71:8080

209.236.123.42:8080

77.55.211.77:8080

85.105.140.135:443

138.97.60.141:7080

217.13.106.14:8080

190.2.31.172:80

94.176.234.118:443

191.182.6.118:80

111.67.12.221:8080

91.219.169.180:80

70.32.115.157:8080

45.33.77.42:8080

177.73.0.98:443

219.92.8.17:8080

212.174.55.22:443

189.2.177.210:443

46.28.111.142:7080

37.52.87.0:80

rsa_pubkey.plain

Targets

    • Target

      c520069c9a5f010b2c81afeb1c758a4e14e6800da74bf5e70cec6299c0fcddd2

    • Size

      848KB

    • MD5

      a9ffe14d9c5f19f013e644f07c464e10

    • SHA1

      0d42db369267af0a9dff60690604578d6a2f16a0

    • SHA256

      c520069c9a5f010b2c81afeb1c758a4e14e6800da74bf5e70cec6299c0fcddd2

    • SHA512

      08b2ce1d09a7c2818a971219e1aac64b5507829470443105992eadec6efc8c5b72d19b055602e8704c012b3006efb150ea8690567fb5d4e85398f3075fcfb67c

    • SSDEEP

      6144:spOLPiioP4UqgzLc6c6c6c6c6c6c6c6c6csI+7L1NIDK:spu44gL

MITRE ATT&CK Enterprise v15

Tasks