General

  • Target

    89ec82ef36740c87bae0a557973f1ae5f2bb0b92b0bf400f5438bbb05a5dcad2.exe

  • Size

    219KB

  • Sample

    241125-njg85s1jel

  • MD5

    cb2ae4c382b3c950faa18f91a991de72

  • SHA1

    e5206a2a0ecd118621dd564d334c1bfc81d9b129

  • SHA256

    89ec82ef36740c87bae0a557973f1ae5f2bb0b92b0bf400f5438bbb05a5dcad2

  • SHA512

    c726929c1eff3303755f4904e369d8fdd710a8445281d84b294d6f0ef9ab7dd15bc9c0685f8230b1a8c8d65c9b8cd6b97dbd631967b68df25d42e4ec84aea1d6

  • SSDEEP

    6144:njOAxKIiawQSu3IF9UtNRW9l1QAVzEAvv2OqsPa4HT0i4LFMEJf8Me5w6BB:nQIiawQSu3IF9UtNRW9l1QAVzEU+OZ3P

Malware Config

Extracted

Family

emotet

Botnet

Epoch2

C2

67.163.161.107:80

107.170.146.252:8080

173.212.214.235:7080

167.114.153.111:8080

185.94.252.104:443

110.142.236.207:80

194.187.133.160:443

218.147.193.146:80

172.104.97.173:8080

216.139.123.119:80

50.91.114.38:80

202.134.4.211:8080

113.61.66.94:80

139.99.158.11:443

62.171.142.179:8080

37.139.21.175:8080

190.108.228.27:443

94.23.237.171:443

154.91.33.137:443

201.241.127.190:80

rsa_pubkey.plain

Targets

    • Target

      89ec82ef36740c87bae0a557973f1ae5f2bb0b92b0bf400f5438bbb05a5dcad2.exe

    • Size

      219KB

    • MD5

      cb2ae4c382b3c950faa18f91a991de72

    • SHA1

      e5206a2a0ecd118621dd564d334c1bfc81d9b129

    • SHA256

      89ec82ef36740c87bae0a557973f1ae5f2bb0b92b0bf400f5438bbb05a5dcad2

    • SHA512

      c726929c1eff3303755f4904e369d8fdd710a8445281d84b294d6f0ef9ab7dd15bc9c0685f8230b1a8c8d65c9b8cd6b97dbd631967b68df25d42e4ec84aea1d6

    • SSDEEP

      6144:njOAxKIiawQSu3IF9UtNRW9l1QAVzEAvv2OqsPa4HT0i4LFMEJf8Me5w6BB:nQIiawQSu3IF9UtNRW9l1QAVzEU+OZ3P

MITRE ATT&CK Enterprise v15

Tasks