General

  • Target

    c2744c2a32459a4a35cc9575ff32d8de2abc2473b751da170869d663dd075341.exe

  • Size

    923KB

  • Sample

    241126-rtykna1nfq

  • MD5

    3efacb5e527642848c44de2a2112d6c3

  • SHA1

    4be49f96eb08e3da6901e84ca69c8a402dc2b6c9

  • SHA256

    c2744c2a32459a4a35cc9575ff32d8de2abc2473b751da170869d663dd075341

  • SHA512

    824f7fafba7e2fb78fc605f1a9052e4f14e0b5ed7d58c435d7b65ce8a5030f565203c8780f6dfba6a8fd678b9eb05e5a289c6a8bb09cbcdd848a66ece0738aa5

  • SSDEEP

    12288:PMlCHIWMOZkzNxP+KngRYq3Ocs5PFCJbjhK+pfnf0LqiVNk:YCpZkiKngRYbcUYXhK+pfnsLq6a

Malware Config

Extracted

Family

emotet

Botnet

Epoch1

C2

73.116.193.136:80

185.94.252.13:443

149.62.173.247:8080

89.32.150.160:8080

185.94.252.12:80

77.90.136.129:8080

83.169.21.32:7080

104.236.161.64:8080

114.109.179.60:80

189.2.177.210:443

68.183.190.199:8080

144.139.91.187:443

185.94.252.27:443

190.181.235.46:80

82.196.15.205:8080

46.28.111.142:7080

181.167.96.215:80

202.62.39.111:80

219.92.13.25:80

191.99.160.58:80

rsa_pubkey.plain

Targets

    • Target

      c2744c2a32459a4a35cc9575ff32d8de2abc2473b751da170869d663dd075341.exe

    • Size

      923KB

    • MD5

      3efacb5e527642848c44de2a2112d6c3

    • SHA1

      4be49f96eb08e3da6901e84ca69c8a402dc2b6c9

    • SHA256

      c2744c2a32459a4a35cc9575ff32d8de2abc2473b751da170869d663dd075341

    • SHA512

      824f7fafba7e2fb78fc605f1a9052e4f14e0b5ed7d58c435d7b65ce8a5030f565203c8780f6dfba6a8fd678b9eb05e5a289c6a8bb09cbcdd848a66ece0738aa5

    • SSDEEP

      12288:PMlCHIWMOZkzNxP+KngRYq3Ocs5PFCJbjhK+pfnf0LqiVNk:YCpZkiKngRYbcUYXhK+pfnsLq6a

MITRE ATT&CK Enterprise v15

Tasks