General

  • Target

    1746c81d1d2bcd7bca7346b2a1e0bb036c927b3e9d8629af8c7a442dc03785ca

  • Size

    414KB

  • Sample

    200114-ep2jcvx5ex

  • MD5

    3cddaaee287ea81f1ab5e90b11db2cb3

  • SHA1

    0e10b15d2b5f875dd0319e33138ed1c640a7c5b0

  • SHA256

    1746c81d1d2bcd7bca7346b2a1e0bb036c927b3e9d8629af8c7a442dc03785ca

  • SHA512

    992e9aace0a6e6ef3ebf33e2b65df04488bf872747459a99d8615addb4b811a8710bcd347e1d39739b4761591e9bdd00b36a15b30ad5fd7926e94c52a7655c5a

Malware Config

Extracted

Family

emotet

Botnet

Epoch1

C2

70.184.69.146:80

186.177.165.196:443

139.47.135.215:80

192.241.143.52:8080

159.65.241.220:8080

45.79.95.107:443

69.163.33.84:8080

177.34.142.163:80

200.123.183.137:443

2.47.112.72:80

190.17.44.48:80

187.54.225.76:80

190.219.149.236:80

190.100.153.162:443

58.171.38.26:80

91.205.215.57:7080

152.231.89.226:80

94.176.234.118:443

201.213.100.141:8080

203.25.159.3:8080

rsa_pubkey.plain

Targets

    • Target

      1746c81d1d2bcd7bca7346b2a1e0bb036c927b3e9d8629af8c7a442dc03785ca

    • Size

      414KB

    • MD5

      3cddaaee287ea81f1ab5e90b11db2cb3

    • SHA1

      0e10b15d2b5f875dd0319e33138ed1c640a7c5b0

    • SHA256

      1746c81d1d2bcd7bca7346b2a1e0bb036c927b3e9d8629af8c7a442dc03785ca

    • SHA512

      992e9aace0a6e6ef3ebf33e2b65df04488bf872747459a99d8615addb4b811a8710bcd347e1d39739b4761591e9bdd00b36a15b30ad5fd7926e94c52a7655c5a

    Score
    10/10
    • Emotet

      Emotet is a trojan that is primarily spread through spam emails

    • Drops file in System32 directory

MITRE ATT&CK Matrix

Tasks