General

  • Target

    Emotet (2).bin

  • Size

    104KB

  • Sample

    200713-6hksp6ez3a

  • MD5

    cc217469d3c5b9163db9debdeda105f7

  • SHA1

    5572b1e822116ecc5a6a1891681d38b6484b67d6

  • SHA256

    763d2a1a32df52fe199d7ab1bc2dc6c028521244b8faad7b6be21fd76657c8ab

  • SHA512

    7fa2f38d26038816afb87c757ef958ff6cba802f1cc6366a002ece6b66a24fa69fc29d50ba1053189d0245470a70c8e80f5f532c62fa76693a6476dd5d7bfc78

Malware Config

Extracted

Family

emotet

Botnet

Epoch3

C2

181.230.65.232:80

77.74.78.80:443

192.241.220.183:8080

195.201.56.70:8080

125.63.106.22:80

203.153.216.178:7080

139.59.12.63:8080

190.251.235.239:80

14.99.112.138:80

192.163.221.191:8080

46.49.124.53:80

81.214.253.80:443

46.32.229.152:8080

74.208.173.91:8080

163.172.107.70:8080

37.46.129.215:8080

212.112.113.235:80

50.116.78.109:8080

113.161.148.81:80

78.188.170.128:80

rsa_pubkey.plain

Targets

    • Target

      Emotet (2).bin

    • Size

      104KB

    • MD5

      cc217469d3c5b9163db9debdeda105f7

    • SHA1

      5572b1e822116ecc5a6a1891681d38b6484b67d6

    • SHA256

      763d2a1a32df52fe199d7ab1bc2dc6c028521244b8faad7b6be21fd76657c8ab

    • SHA512

      7fa2f38d26038816afb87c757ef958ff6cba802f1cc6366a002ece6b66a24fa69fc29d50ba1053189d0245470a70c8e80f5f532c62fa76693a6476dd5d7bfc78

    Score
    10/10
    • Emotet

      Emotet is a trojan that is primarily spread through spam emails.

MITRE ATT&CK Matrix

Tasks