General

  • Target

    7fea456efa04f19c529a5979177014585e25bd9c0715015fb46f62fb20fd2def.exe

  • Size

    804KB

  • Sample

    250107-j3y9jstqfj

  • MD5

    dfe9746e07ef3ded3e8c1735ebf0a040

  • SHA1

    19ff1c2a3b2953581e7e147a53477c183e243771

  • SHA256

    7fea456efa04f19c529a5979177014585e25bd9c0715015fb46f62fb20fd2def

  • SHA512

    68399da809137aec26fad068241cfd7ed8b60bf6ae6eb0e8cec74aa93cf16ecd4a2f9080720d310ea6826d87f6ca356d724481a241c225d9243a9ef0a2d7828a

  • SSDEEP

    12288:mRYxH5FNAuiTPq40c9iq5fb/isU3z4ZuFW:71AuOicQqxdyQl

Malware Config

Extracted

Family

emotet

Botnet

Epoch1

C2

174.100.27.229:80

209.126.6.222:8080

5.153.250.14:8080

192.241.146.84:8080

95.9.180.128:80

77.55.211.77:8080

85.105.140.135:443

45.33.77.42:8080

77.90.136.129:8080

94.176.234.118:443

190.163.31.26:80

190.6.193.152:8080

190.181.235.46:80

81.198.69.61:80

188.2.217.94:80

114.109.179.60:80

83.169.21.32:7080

137.74.106.111:7080

212.231.60.98:80

170.81.48.2:80

rsa_pubkey.plain

Targets

    • Target

      7fea456efa04f19c529a5979177014585e25bd9c0715015fb46f62fb20fd2def.exe

    • Size

      804KB

    • MD5

      dfe9746e07ef3ded3e8c1735ebf0a040

    • SHA1

      19ff1c2a3b2953581e7e147a53477c183e243771

    • SHA256

      7fea456efa04f19c529a5979177014585e25bd9c0715015fb46f62fb20fd2def

    • SHA512

      68399da809137aec26fad068241cfd7ed8b60bf6ae6eb0e8cec74aa93cf16ecd4a2f9080720d310ea6826d87f6ca356d724481a241c225d9243a9ef0a2d7828a

    • SSDEEP

      12288:mRYxH5FNAuiTPq40c9iq5fb/isU3z4ZuFW:71AuOicQqxdyQl

MITRE ATT&CK Enterprise v15

Tasks