General

  • Target

    c8861a727c501556c714f07b60766831bf6392833fdf2a2d34338ad2e0101a1dN.exe

  • Size

    68KB

  • Sample

    241125-bygjya1let

  • MD5

    eb6d2baf6a93df0ea01967d39cef98d0

  • SHA1

    2e1d1cb5f1799632d4f58d096175331e7b1ddc49

  • SHA256

    c8861a727c501556c714f07b60766831bf6392833fdf2a2d34338ad2e0101a1d

  • SHA512

    77d8dc7119151a836a649be2b7d9e80af2c73e01934dfd23a132ced72e4a7772b2629b3ad3c1a33843b76ecf48c59da6a0c5a6b33bb9f383bf26c5189dfbed82

  • SSDEEP

    768:iO2nOGjqJLAjuTfOrHDwwd6NTSx1qW2XnZGBAxhkMlummZGQy1kH85gPn6K1C5+Q:D2nOIwpOrHDwMaTSmW8GGh1G8AQ

Malware Config

Extracted

Family

emotet

Botnet

Epoch2

C2

74.120.55.163:80

176.10.250.88:8080

96.8.113.4:8080

157.245.99.39:8080

104.236.246.93:8080

180.92.239.110:8080

83.110.223.58:443

47.146.117.214:80

81.2.235.111:8080

46.105.131.79:8080

209.182.216.177:443

37.139.21.175:8080

74.208.45.104:8080

121.124.124.40:7080

142.105.151.124:443

110.145.77.103:80

76.27.179.47:80

119.198.40.179:80

37.187.72.193:8080

93.51.50.171:8080

rsa_pubkey.plain

Targets

    • Target

      c8861a727c501556c714f07b60766831bf6392833fdf2a2d34338ad2e0101a1dN.exe

    • Size

      68KB

    • MD5

      eb6d2baf6a93df0ea01967d39cef98d0

    • SHA1

      2e1d1cb5f1799632d4f58d096175331e7b1ddc49

    • SHA256

      c8861a727c501556c714f07b60766831bf6392833fdf2a2d34338ad2e0101a1d

    • SHA512

      77d8dc7119151a836a649be2b7d9e80af2c73e01934dfd23a132ced72e4a7772b2629b3ad3c1a33843b76ecf48c59da6a0c5a6b33bb9f383bf26c5189dfbed82

    • SSDEEP

      768:iO2nOGjqJLAjuTfOrHDwwd6NTSx1qW2XnZGBAxhkMlummZGQy1kH85gPn6K1C5+Q:D2nOIwpOrHDwMaTSmW8GGh1G8AQ

MITRE ATT&CK Enterprise v15

Tasks