General

  • Target

    d55380c968bc537c4174ba14e265cf162fedf5cf75ecb8209612619ff013cf24

  • Size

    623KB

  • Sample

    200714-8wze45rfnj

  • MD5

    5bfe07fa3a11428c26fc6c7aab3a3637

  • SHA1

    3a56e022dc9758a41cdf72cbb2e655e0d74c4118

  • SHA256

    d55380c968bc537c4174ba14e265cf162fedf5cf75ecb8209612619ff013cf24

  • SHA512

    5ee4bd7b7fd1bfac042403e4acf40156737274d0d72a4f99951c1c16ba2b8d5c97d814ea45548bb582b18b5a1c1d7edff3f858ba63c630e00b5043c7047ed6b5

Malware Config

Extracted

Family

emotet

Botnet

Epoch3

C2

190.55.233.156:80

77.74.78.80:443

185.142.236.163:443

80.211.32.88:8080

125.63.106.22:80

212.112.113.235:80

41.185.29.128:8080

115.79.195.246:80

177.0.241.28:80

81.214.253.80:443

78.188.170.128:80

153.133.224.78:80

37.70.131.107:80

192.241.220.183:8080

88.235.222.255:80

51.38.201.19:7080

110.44.113.2:8080

50.116.78.109:8080

41.169.20.147:8090

192.163.221.191:8080

rsa_pubkey.plain

Targets

    • Target

      d55380c968bc537c4174ba14e265cf162fedf5cf75ecb8209612619ff013cf24

    • Size

      623KB

    • MD5

      5bfe07fa3a11428c26fc6c7aab3a3637

    • SHA1

      3a56e022dc9758a41cdf72cbb2e655e0d74c4118

    • SHA256

      d55380c968bc537c4174ba14e265cf162fedf5cf75ecb8209612619ff013cf24

    • SHA512

      5ee4bd7b7fd1bfac042403e4acf40156737274d0d72a4f99951c1c16ba2b8d5c97d814ea45548bb582b18b5a1c1d7edff3f858ba63c630e00b5043c7047ed6b5

    Score
    10/10
    • Emotet

      Emotet is a trojan that is primarily spread through spam emails.

MITRE ATT&CK Matrix

Tasks