General

  • Target

    ea380b88bb481273850d30994f25e19668ceb2567542d9af2cb4c939f630bf12

  • Size

    423KB

  • Sample

    240701-esg53ayhlq

  • MD5

    70a4b2f8eabf1b365caafb20035314e7

  • SHA1

    cc4082d36b5f3e41d83ea469204111c0aa2df360

  • SHA256

    ea380b88bb481273850d30994f25e19668ceb2567542d9af2cb4c939f630bf12

  • SHA512

    67f9bf43b056993416c8bce7167f7f6c1e5338a9e551a66fc4dec89f3d46cb5a0e1d83926323811967bcf36fdbffbc2a025b17a980515e211d372beb022bc491

  • SSDEEP

    12288:jTZfxSuI5OORAL3Onl/+HuVPxskfcg3gA:jT6uI57Q+nd+Kxsk

Malware Config

Extracted

Family

emotet

Botnet

Epoch5

C2

104.248.225.227:8080

62.171.178.147:8080

165.22.254.236:8080

128.199.242.164:8080

188.165.79.151:443

202.29.239.162:443

37.187.114.15:8080

175.126.176.79:8080

103.56.149.105:8080

103.126.216.86:443

188.225.32.231:4143

43.129.209.178:443

93.104.209.107:8080

118.98.72.86:443

78.47.204.80:443

128.199.217.206:443

157.230.99.206:8080

87.106.97.83:7080

83.229.80.93:8080

88.217.172.165:8080

eck1.plain
ecs1.plain

Targets

    • Target

      ea380b88bb481273850d30994f25e19668ceb2567542d9af2cb4c939f630bf12

    • Size

      423KB

    • MD5

      70a4b2f8eabf1b365caafb20035314e7

    • SHA1

      cc4082d36b5f3e41d83ea469204111c0aa2df360

    • SHA256

      ea380b88bb481273850d30994f25e19668ceb2567542d9af2cb4c939f630bf12

    • SHA512

      67f9bf43b056993416c8bce7167f7f6c1e5338a9e551a66fc4dec89f3d46cb5a0e1d83926323811967bcf36fdbffbc2a025b17a980515e211d372beb022bc491

    • SSDEEP

      12288:jTZfxSuI5OORAL3Onl/+HuVPxskfcg3gA:jT6uI57Q+nd+Kxsk

    • Emotet

      Emotet is a trojan that is primarily spread through spam emails.

MITRE ATT&CK Matrix

Tasks