General

  • Target

    b90364d26c9f5f383dec6206275853beddaaace7966aa0247d815a5f9deb5270N.exe

  • Size

    219KB

  • Sample

    241126-vzcrxs1lds

  • MD5

    386bdb173072967c7c6ba0f8c1e77390

  • SHA1

    fbab1877c2ca70a216e2a2871a725da965542b91

  • SHA256

    b90364d26c9f5f383dec6206275853beddaaace7966aa0247d815a5f9deb5270

  • SHA512

    5ce28ea98ad34940bae17ffac14d506f37637173e13455bc3dbae1eea44b0156c5ca4d014544008c2aa7664c636f2da4188eb5b827424ac4c6ccdfc866aa7a97

  • SSDEEP

    6144:njOAxKIiawQSu3IF9UtNRW9l1QAVzEAvv2OqsPa4HT0i4LFMEJf8Me5w6B:nQIiawQSu3IF9UtNRW9l1QAVzEU+OZ3D

Malware Config

Extracted

Family

emotet

Botnet

Epoch2

C2

67.163.161.107:80

107.170.146.252:8080

173.212.214.235:7080

167.114.153.111:8080

185.94.252.104:443

110.142.236.207:80

194.187.133.160:443

218.147.193.146:80

172.104.97.173:8080

216.139.123.119:80

50.91.114.38:80

202.134.4.211:8080

113.61.66.94:80

139.99.158.11:443

62.171.142.179:8080

37.139.21.175:8080

190.108.228.27:443

94.23.237.171:443

154.91.33.137:443

201.241.127.190:80

rsa_pubkey.plain

Targets

    • Target

      b90364d26c9f5f383dec6206275853beddaaace7966aa0247d815a5f9deb5270N.exe

    • Size

      219KB

    • MD5

      386bdb173072967c7c6ba0f8c1e77390

    • SHA1

      fbab1877c2ca70a216e2a2871a725da965542b91

    • SHA256

      b90364d26c9f5f383dec6206275853beddaaace7966aa0247d815a5f9deb5270

    • SHA512

      5ce28ea98ad34940bae17ffac14d506f37637173e13455bc3dbae1eea44b0156c5ca4d014544008c2aa7664c636f2da4188eb5b827424ac4c6ccdfc866aa7a97

    • SSDEEP

      6144:njOAxKIiawQSu3IF9UtNRW9l1QAVzEAvv2OqsPa4HT0i4LFMEJf8Me5w6B:nQIiawQSu3IF9UtNRW9l1QAVzEU+OZ3D

MITRE ATT&CK Enterprise v15

Tasks