General

  • Target

    6edddb300c22e6edb14d2a25b40e0b24b7958770f2527ece1783826eb84ec758.exe

  • Size

    666KB

  • Sample

    241126-dnl3saxqcl

  • MD5

    2d28c32d04a9868db2186e0d097b3e07

  • SHA1

    0fdf4dd63d7760549f22251cdfe70cc93de74908

  • SHA256

    6edddb300c22e6edb14d2a25b40e0b24b7958770f2527ece1783826eb84ec758

  • SHA512

    6ffe5894070b9ea157a01d70d78ecc95d5e7d6a6cd2c6d500b4718cf46c65441da1aa0e2c588c65ef4af215cd093debfd7f6e7b0a6e9eca6d86dba8d802eb72d

  • SSDEEP

    12288:O9q4kCBblwFiqeZwh/ZL2BLnH9l0ACR9u/gXkLsv2PKSISBekxOQKOSeUt:sbukqeZwzSBLnHsAg9uCkLDPKSISBfOv

Malware Config

Extracted

Family

emotet

Botnet

Epoch2

C2

75.188.96.231:80

72.10.36.104:8080

167.114.153.111:8080

72.249.144.95:8080

80.241.255.202:8080

71.72.196.159:80

164.160.45.41:8080

203.153.216.189:7080

185.94.252.104:443

142.112.10.95:20

61.19.246.238:443

220.245.198.194:80

37.139.21.175:8080

108.46.29.236:80

209.54.13.14:80

87.106.136.232:8080

87.106.139.101:8080

176.111.60.55:8080

130.0.132.242:80

94.200.114.161:80

rsa_pubkey.plain

Targets

    • Target

      6edddb300c22e6edb14d2a25b40e0b24b7958770f2527ece1783826eb84ec758.exe

    • Size

      666KB

    • MD5

      2d28c32d04a9868db2186e0d097b3e07

    • SHA1

      0fdf4dd63d7760549f22251cdfe70cc93de74908

    • SHA256

      6edddb300c22e6edb14d2a25b40e0b24b7958770f2527ece1783826eb84ec758

    • SHA512

      6ffe5894070b9ea157a01d70d78ecc95d5e7d6a6cd2c6d500b4718cf46c65441da1aa0e2c588c65ef4af215cd093debfd7f6e7b0a6e9eca6d86dba8d802eb72d

    • SSDEEP

      12288:O9q4kCBblwFiqeZwh/ZL2BLnH9l0ACR9u/gXkLsv2PKSISBekxOQKOSeUt:sbukqeZwzSBLnHsAg9uCkLDPKSISBfOv

MITRE ATT&CK Enterprise v15

Tasks