General

  • Target

    7f77dada2fe25ce423a169d1229b4aa926b4b5b3be976d1981c2b5cae48e9ee8

  • Size

    414KB

  • Sample

    200114-n3k9knsjls

  • MD5

    419e5659f1ab37fe1bf7e032c5927382

  • SHA1

    56be3b5bf5941a7ae86e545df156ea5f31450a08

  • SHA256

    7f77dada2fe25ce423a169d1229b4aa926b4b5b3be976d1981c2b5cae48e9ee8

  • SHA512

    9e01f1559c959843069f80c2fc2f91426a9d7646faf18887718b0c949b6e084a3b2d99320bf73b26de21f910e178054a4ae8ccd8fb80c0a17f503112767dfdaf

Malware Config

Extracted

Family

emotet

Botnet

Epoch1

C2

70.184.69.146:80

186.177.165.196:443

139.47.135.215:80

192.241.143.52:8080

159.65.241.220:8080

45.79.95.107:443

69.163.33.84:8080

177.34.142.163:80

200.123.183.137:443

2.47.112.72:80

190.17.44.48:80

187.54.225.76:80

190.219.149.236:80

190.100.153.162:443

58.171.38.26:80

91.205.215.57:7080

152.231.89.226:80

94.176.234.118:443

201.213.100.141:8080

203.25.159.3:8080

rsa_pubkey.plain

Targets

    • Target

      7f77dada2fe25ce423a169d1229b4aa926b4b5b3be976d1981c2b5cae48e9ee8

    • Size

      414KB

    • MD5

      419e5659f1ab37fe1bf7e032c5927382

    • SHA1

      56be3b5bf5941a7ae86e545df156ea5f31450a08

    • SHA256

      7f77dada2fe25ce423a169d1229b4aa926b4b5b3be976d1981c2b5cae48e9ee8

    • SHA512

      9e01f1559c959843069f80c2fc2f91426a9d7646faf18887718b0c949b6e084a3b2d99320bf73b26de21f910e178054a4ae8ccd8fb80c0a17f503112767dfdaf

    Score
    10/10
    • Emotet

      Emotet is a trojan that is primarily spread through spam emails

    • Drops file in System32 directory

MITRE ATT&CK Matrix

Tasks