General

  • Target

    fdb530f7b252dc9381a2cc7eebd0f0f9292ebf439504297fba6e664dca44decc.exe

  • Size

    88KB

  • Sample

    241218-k6ppystqam

  • MD5

    10d8b8a6e37b6290b98e047f4774cd9d

  • SHA1

    585e567690ea13ced1bb7503bb7a1699423c98c6

  • SHA256

    fdb530f7b252dc9381a2cc7eebd0f0f9292ebf439504297fba6e664dca44decc

  • SHA512

    abf8b400eebd4b0cc59b3925022d0557b433acb312078cbe398adf448575e3d90a3e3b33f910352e27d9a153b05df22477a457261baa85ad6a6a31d85a08cb0f

  • SSDEEP

    768:ELo2dWD49IqHq32PZHSXqfMlklNTlGztWVyZywpo7c2A3hUiXS/TQXCePFzsucM1:inWoG8gq0liN00VWVpNUz/TArcxQd

Malware Config

Extracted

Family

emotet

Botnet

Epoch2

C2

75.188.96.231:80

72.10.36.104:8080

167.114.153.111:8080

72.249.144.95:8080

80.241.255.202:8080

71.72.196.159:80

164.160.45.41:8080

203.153.216.189:7080

185.94.252.104:443

142.112.10.95:20

61.19.246.238:443

220.245.198.194:80

37.139.21.175:8080

108.46.29.236:80

209.54.13.14:80

87.106.136.232:8080

87.106.139.101:8080

176.111.60.55:8080

130.0.132.242:80

94.200.114.161:80

rsa_pubkey.plain

Targets

    • Target

      fdb530f7b252dc9381a2cc7eebd0f0f9292ebf439504297fba6e664dca44decc.exe

    • Size

      88KB

    • MD5

      10d8b8a6e37b6290b98e047f4774cd9d

    • SHA1

      585e567690ea13ced1bb7503bb7a1699423c98c6

    • SHA256

      fdb530f7b252dc9381a2cc7eebd0f0f9292ebf439504297fba6e664dca44decc

    • SHA512

      abf8b400eebd4b0cc59b3925022d0557b433acb312078cbe398adf448575e3d90a3e3b33f910352e27d9a153b05df22477a457261baa85ad6a6a31d85a08cb0f

    • SSDEEP

      768:ELo2dWD49IqHq32PZHSXqfMlklNTlGztWVyZywpo7c2A3hUiXS/TQXCePFzsucM1:inWoG8gq0liN00VWVpNUz/TArcxQd

MITRE ATT&CK Enterprise v15

Tasks