General

  • Target

    623ed825a12419f68cac0a7ceb8f5a180ce50b0796fba659d8147b84bad8391b

  • Size

    568KB

  • Sample

    250113-a7xf3szpfm

  • MD5

    3b478ea20f0e937da33956ab73622dad

  • SHA1

    b9a7a6a42fd72bc8cbe2a73934dc63cc8417a925

  • SHA256

    623ed825a12419f68cac0a7ceb8f5a180ce50b0796fba659d8147b84bad8391b

  • SHA512

    1e95e16debdd6ff8edddf3797b6f23f8a3dcdc3274e7c74b9a82bb01a6bf1c5a1b5b6146cd9eef6b95ceb9e3423ec0d3aa460b1a2db5dda912d0bfaaa54f1ce7

  • SSDEEP

    6144:Lt079Bvns6+dSEDVoOhjfbJ0r0dZQ4XYo8Zv/J5QnEZgHmjihGXL/578RdBg9K+g:Lk9Z1/2GOxfbQCBURzQ4ga6U8ReB5wd

Malware Config

Extracted

Family

emotet

Botnet

Epoch1

C2

190.202.229.74:80

118.69.11.81:7080

70.39.251.94:8080

87.230.25.43:8080

94.23.62.116:8080

37.187.161.206:8080

45.46.37.97:80

138.97.60.141:7080

177.144.130.105:8080

169.1.39.242:80

209.236.123.42:8080

202.134.4.210:7080

193.251.77.110:80

2.45.176.233:80

217.13.106.14:8080

189.223.16.99:80

190.101.156.139:80

77.238.212.227:80

181.58.181.9:80

37.183.81.217:80

rsa_pubkey.plain

Targets

    • Target

      623ed825a12419f68cac0a7ceb8f5a180ce50b0796fba659d8147b84bad8391b

    • Size

      568KB

    • MD5

      3b478ea20f0e937da33956ab73622dad

    • SHA1

      b9a7a6a42fd72bc8cbe2a73934dc63cc8417a925

    • SHA256

      623ed825a12419f68cac0a7ceb8f5a180ce50b0796fba659d8147b84bad8391b

    • SHA512

      1e95e16debdd6ff8edddf3797b6f23f8a3dcdc3274e7c74b9a82bb01a6bf1c5a1b5b6146cd9eef6b95ceb9e3423ec0d3aa460b1a2db5dda912d0bfaaa54f1ce7

    • SSDEEP

      6144:Lt079Bvns6+dSEDVoOhjfbJ0r0dZQ4XYo8Zv/J5QnEZgHmjihGXL/578RdBg9K+g:Lk9Z1/2GOxfbQCBURzQ4ga6U8ReB5wd

MITRE ATT&CK Enterprise v15

Tasks