General

  • Target

    9d13bfb3deff3b83ad20c1418ff95366756febcef669c135065eff5c8f100f95.exe

  • Size

    65KB

  • Sample

    241125-qyzg3swjhl

  • MD5

    1b77dcbec7bae456487eac4531ed9f1a

  • SHA1

    116ac45d815ffeae45e69e6b3b62c8d0ba38d966

  • SHA256

    9d13bfb3deff3b83ad20c1418ff95366756febcef669c135065eff5c8f100f95

  • SHA512

    55a2d8c6fde400e0036a5adb7a988e3b9f771b023fa58a9182d526719d6708eb6dbf99a687af931440b511eecc2dfe41f4114b9d1eea6ebc1e895369f9a0c817

  • SSDEEP

    1536:HSQpv/ns4Q6UxkPWrbvkM8qLv1ASGZq4nvM6cCrc5hf8ILVV2M8OrlZ:yQns4UxkesgASGZtM6VKVUQ

Malware Config

Extracted

Family

emotet

Botnet

Epoch3

C2

190.38.252.45:443

105.225.77.21:80

181.167.35.84:80

164.68.115.146:8080

5.189.148.98:8080

46.105.128.215:8080

69.30.205.162:7080

190.161.67.63:80

81.82.247.216:80

72.69.99.47:80

172.90.70.168:443

91.117.31.181:80

200.71.112.158:53

51.77.113.97:8080

190.101.87.170:80

96.234.38.186:8080

190.146.14.143:443

86.70.224.211:80

88.247.26.78:80

175.103.239.50:80

rsa_pubkey.plain

Targets

    • Target

      9d13bfb3deff3b83ad20c1418ff95366756febcef669c135065eff5c8f100f95.exe

    • Size

      65KB

    • MD5

      1b77dcbec7bae456487eac4531ed9f1a

    • SHA1

      116ac45d815ffeae45e69e6b3b62c8d0ba38d966

    • SHA256

      9d13bfb3deff3b83ad20c1418ff95366756febcef669c135065eff5c8f100f95

    • SHA512

      55a2d8c6fde400e0036a5adb7a988e3b9f771b023fa58a9182d526719d6708eb6dbf99a687af931440b511eecc2dfe41f4114b9d1eea6ebc1e895369f9a0c817

    • SSDEEP

      1536:HSQpv/ns4Q6UxkPWrbvkM8qLv1ASGZq4nvM6cCrc5hf8ILVV2M8OrlZ:yQns4UxkesgASGZtM6VKVUQ

MITRE ATT&CK Enterprise v15

Tasks