General

  • Target

    5aaa31da026146d5d138c79ece5c5b609c043250d9642fa9a7b6288f5f3b13e4

  • Size

    197KB

  • Sample

    191031-fl2t4k1m42

  • MD5

    173737188daaaa9fc81c1ae6809e368d

  • SHA1

    3788e119f029b37edadcf2e32edcea2855f838a1

  • SHA256

    5aaa31da026146d5d138c79ece5c5b609c043250d9642fa9a7b6288f5f3b13e4

  • SHA512

    ec0fe39f12835ef81b3572df2caa5d1b18419026586f91c89cfa086e7ab956ea2448deb416be8269079e13b8042234c998b6592bf813663569a1e68b967a7649

Malware Config

Extracted

Family

emotet

Botnet

Epoch2

C2

192.241.220.155:8080

167.99.105.223:7080

176.31.200.130:8080

212.129.24.79:8080

94.177.216.217:8080

46.105.131.87:80

133.167.80.63:7080

167.71.10.37:8080

87.106.139.101:8080

144.139.247.220:80

217.160.182.191:8080

200.71.148.138:8080

186.4.172.5:8080

95.128.43.213:8080

27.147.163.188:8080

209.141.41.136:8080

186.4.172.5:20

115.78.95.230:443

104.236.246.93:8080

31.12.67.62:7080

rsa_pubkey.plain

Targets

    • Target

      5aaa31da026146d5d138c79ece5c5b609c043250d9642fa9a7b6288f5f3b13e4

    • Size

      197KB

    • MD5

      173737188daaaa9fc81c1ae6809e368d

    • SHA1

      3788e119f029b37edadcf2e32edcea2855f838a1

    • SHA256

      5aaa31da026146d5d138c79ece5c5b609c043250d9642fa9a7b6288f5f3b13e4

    • SHA512

      ec0fe39f12835ef81b3572df2caa5d1b18419026586f91c89cfa086e7ab956ea2448deb416be8269079e13b8042234c998b6592bf813663569a1e68b967a7649

MITRE ATT&CK Matrix

Tasks