General

  • Target

    iscsied.bin

  • Size

    692KB

  • Sample

    200710-jmzn5x271n

  • MD5

    cdedba9345f7443d417373a581f0eb96

  • SHA1

    e376629c1a6fcc48a9478e90c59153a634f1cc12

  • SHA256

    ce8679260773363b9b36e64d7624af8ad5af6f631a3813f789245ac9a06db390

  • SHA512

    f8a99ad2c77339b2b0930b6c24823cb793c3ac5dcd0b2336c9ed7265296c28586a335903bec195665e05ae3b1370abb1be05df38135269fae43bc577f84679d1

Malware Config

Extracted

Family

emotet

Botnet

Epoch3

C2

181.230.65.232:80

77.74.78.80:443

192.241.220.183:8080

195.201.56.70:8080

125.63.106.22:80

203.153.216.178:7080

139.59.12.63:8080

190.251.235.239:80

14.99.112.138:80

192.163.221.191:8080

46.49.124.53:80

81.214.253.80:443

46.32.229.152:8080

74.208.173.91:8080

163.172.107.70:8080

37.46.129.215:8080

212.112.113.235:80

50.116.78.109:8080

113.161.148.81:80

78.188.170.128:80

rsa_pubkey.plain

Targets

    • Target

      iscsied.bin

    • Size

      692KB

    • MD5

      cdedba9345f7443d417373a581f0eb96

    • SHA1

      e376629c1a6fcc48a9478e90c59153a634f1cc12

    • SHA256

      ce8679260773363b9b36e64d7624af8ad5af6f631a3813f789245ac9a06db390

    • SHA512

      f8a99ad2c77339b2b0930b6c24823cb793c3ac5dcd0b2336c9ed7265296c28586a335903bec195665e05ae3b1370abb1be05df38135269fae43bc577f84679d1

    Score
    10/10
    • Emotet

      Emotet is a trojan that is primarily spread through spam emails.

MITRE ATT&CK Matrix

Tasks