General

  • Target

    55459f01484d1d524c9910578fd1b470dcdaf7ea69f0fffcaa0c1e102813032e.exe

  • Size

    96KB

  • Sample

    241126-smq3nswpgw

  • MD5

    a56699097be8b79dfc0eba7fde8953f5

  • SHA1

    58a1d7ee83bf39e2b946df8c2c27afe58013ff84

  • SHA256

    55459f01484d1d524c9910578fd1b470dcdaf7ea69f0fffcaa0c1e102813032e

  • SHA512

    593182611672630f04b7f1263738215cd7bd04ff4a47c2564d5bb09a59a4706a39b17e093d7405afc5c6ef5a18b32b4feccaeff293fd61ba639cf94679762b4a

  • SSDEEP

    1536:pNfzLL2izf3x0K8RqjeygS93gQD/zWpQzN82ApG:pNLLL2izf3tljV3Prypq8PG

Malware Config

Extracted

Family

emotet

Botnet

Epoch3

C2

176.216.226.44:80

159.203.232.29:8080

185.86.148.68:443

87.106.231.60:8080

113.161.148.81:80

78.189.60.109:443

192.163.221.191:8080

31.146.61.34:80

37.70.131.107:80

153.220.182.49:80

177.144.130.105:443

181.167.35.84:80

202.5.47.71:80

192.241.220.183:8080

78.188.170.128:80

182.176.95.147:80

87.252.100.28:80

115.78.11.155:80

212.156.133.218:80

203.153.216.178:7080

rsa_pubkey.plain

Targets

    • Target

      55459f01484d1d524c9910578fd1b470dcdaf7ea69f0fffcaa0c1e102813032e.exe

    • Size

      96KB

    • MD5

      a56699097be8b79dfc0eba7fde8953f5

    • SHA1

      58a1d7ee83bf39e2b946df8c2c27afe58013ff84

    • SHA256

      55459f01484d1d524c9910578fd1b470dcdaf7ea69f0fffcaa0c1e102813032e

    • SHA512

      593182611672630f04b7f1263738215cd7bd04ff4a47c2564d5bb09a59a4706a39b17e093d7405afc5c6ef5a18b32b4feccaeff293fd61ba639cf94679762b4a

    • SSDEEP

      1536:pNfzLL2izf3x0K8RqjeygS93gQD/zWpQzN82ApG:pNLLL2izf3tljV3Prypq8PG

MITRE ATT&CK Enterprise v15

Tasks