General

  • Target

    7af3a0abb971d782edd9e661ce002c05d3096e6b0b8a25e6126e914199856119

  • Size

    414KB

  • Sample

    200114-xhtxmkhcks

  • MD5

    dd3727d090961ec39ecdfb1905afd1ba

  • SHA1

    c882c3039e217d19c6e1b80b054c4855c026ece8

  • SHA256

    7af3a0abb971d782edd9e661ce002c05d3096e6b0b8a25e6126e914199856119

  • SHA512

    9e07873eeff0f443cd7d19a64da7a4a9eee9a5fcbe61fa3a379a668088d2b16e99443c1b205a523c721fc38a0689f097f7c9a6bea639cb42532ac9b76bce7e69

Malware Config

Extracted

Family

emotet

Botnet

Epoch2

C2

66.7.242.50:8080

72.186.137.156:80

197.89.27.26:8080

91.250.96.22:8080

37.187.72.193:8080

104.131.44.150:8080

167.71.10.37:8080

78.24.219.147:8080

159.65.25.128:8080

95.128.43.213:8080

179.13.185.19:80

186.86.247.171:443

110.142.38.16:80

201.173.217.124:443

169.239.182.217:8080

211.63.71.72:8080

104.131.11.150:8080

190.55.181.54:443

209.146.22.34:443

64.53.242.181:8080

rsa_pubkey.plain

Targets

    • Target

      7af3a0abb971d782edd9e661ce002c05d3096e6b0b8a25e6126e914199856119

    • Size

      414KB

    • MD5

      dd3727d090961ec39ecdfb1905afd1ba

    • SHA1

      c882c3039e217d19c6e1b80b054c4855c026ece8

    • SHA256

      7af3a0abb971d782edd9e661ce002c05d3096e6b0b8a25e6126e914199856119

    • SHA512

      9e07873eeff0f443cd7d19a64da7a4a9eee9a5fcbe61fa3a379a668088d2b16e99443c1b205a523c721fc38a0689f097f7c9a6bea639cb42532ac9b76bce7e69

    Score
    10/10
    • Emotet

      Emotet is a trojan that is primarily spread through spam emails

    • Drops file in System32 directory

MITRE ATT&CK Matrix

Tasks