General

  • Target

    2e412cb209d73b7ad8d651bfc68cefc27a4eaf6d9d1b770da7fc091a1afca918N.exe

  • Size

    341KB

  • Sample

    241130-lvyddsvpbm

  • MD5

    6b516fb68fc49281618c8c82ab1bec80

  • SHA1

    74e36ffad6f6ad42a026e8e8f520196d1366fb8a

  • SHA256

    2e412cb209d73b7ad8d651bfc68cefc27a4eaf6d9d1b770da7fc091a1afca918

  • SHA512

    05718663104574d9284ecb7b2dfa4fea83d7a63d5d1b4aec277fe6af33399a6bb68cc45db8b3529f0397685f45755bce57189db2332f4b84e9202c49324af399

  • SSDEEP

    6144:kaKGFRDWxCvoqDV8ZGU9Li0VBh0XjSLsLZCj8Hqd0u4LLF:7W1qGZbLV+tC4H11

Malware Config

Extracted

Family

emotet

Botnet

Epoch1

C2

173.68.199.157:80

59.148.253.194:8080

173.212.197.71:8080

98.103.204.12:443

2.45.176.233:80

45.33.77.42:8080

181.58.181.9:80

219.92.13.25:80

12.163.208.58:80

2.85.9.41:8080

172.104.169.32:8080

149.202.72.142:7080

189.223.16.99:80

216.47.196.104:80

191.97.154.2:80

213.197.182.158:8080

94.176.234.118:443

46.105.114.137:8080

177.144.130.105:8080

174.118.202.24:443

rsa_pubkey.plain

Targets

    • Target

      2e412cb209d73b7ad8d651bfc68cefc27a4eaf6d9d1b770da7fc091a1afca918N.exe

    • Size

      341KB

    • MD5

      6b516fb68fc49281618c8c82ab1bec80

    • SHA1

      74e36ffad6f6ad42a026e8e8f520196d1366fb8a

    • SHA256

      2e412cb209d73b7ad8d651bfc68cefc27a4eaf6d9d1b770da7fc091a1afca918

    • SHA512

      05718663104574d9284ecb7b2dfa4fea83d7a63d5d1b4aec277fe6af33399a6bb68cc45db8b3529f0397685f45755bce57189db2332f4b84e9202c49324af399

    • SSDEEP

      6144:kaKGFRDWxCvoqDV8ZGU9Li0VBh0XjSLsLZCj8Hqd0u4LLF:7W1qGZbLV+tC4H11

MITRE ATT&CK Enterprise v15

Tasks