General

  • Target

    7461c9434a08de29ab54cb08c81f90a45394457165f7697dd2b235c32a043365

  • Size

    665KB

  • Sample

    250127-3rqb2szkgs

  • MD5

    86800f030e2be43959553fbed967f0bb

  • SHA1

    48cc82761f4e5f29b1ccd3a0b0ebf2087141a1ed

  • SHA256

    7461c9434a08de29ab54cb08c81f90a45394457165f7697dd2b235c32a043365

  • SHA512

    d42a1a45cfa9c15abfd85d6d4e7a9ea886ab79baf3eab62a4a87ce72bcce5af9344cbabbc951104815d3ab10d323695a38c4b60803558a0e098d9abbe1d47c42

  • SSDEEP

    12288:I9q4kCNflwFiqeZwh/ZL2BLnH9l0ACR9u/2XkLsvKPKS8S18i0m:KfukqeZwzSBLnHsAg9uckLnPKS8S1h

Malware Config

Extracted

Family

emotet

Botnet

Epoch1

C2

173.68.199.157:80

59.148.253.194:8080

173.212.197.71:8080

98.103.204.12:443

2.45.176.233:80

45.33.77.42:8080

181.58.181.9:80

219.92.13.25:80

12.163.208.58:80

2.85.9.41:8080

172.104.169.32:8080

149.202.72.142:7080

189.223.16.99:80

216.47.196.104:80

191.97.154.2:80

213.197.182.158:8080

94.176.234.118:443

46.105.114.137:8080

177.144.130.105:8080

174.118.202.24:443

rsa_pubkey.plain

Targets

    • Target

      7461c9434a08de29ab54cb08c81f90a45394457165f7697dd2b235c32a043365

    • Size

      665KB

    • MD5

      86800f030e2be43959553fbed967f0bb

    • SHA1

      48cc82761f4e5f29b1ccd3a0b0ebf2087141a1ed

    • SHA256

      7461c9434a08de29ab54cb08c81f90a45394457165f7697dd2b235c32a043365

    • SHA512

      d42a1a45cfa9c15abfd85d6d4e7a9ea886ab79baf3eab62a4a87ce72bcce5af9344cbabbc951104815d3ab10d323695a38c4b60803558a0e098d9abbe1d47c42

    • SSDEEP

      12288:I9q4kCNflwFiqeZwh/ZL2BLnH9l0ACR9u/2XkLsvKPKS8S18i0m:KfukqeZwzSBLnHsAg9uckLnPKS8S1h

MITRE ATT&CK Enterprise v15

Tasks