General

  • Target

    4d0539b3f9eb7d08f259aee1935e7bd75644579c659ac1be2f103988f763d4a8.exe

  • Size

    92KB

  • Sample

    200714-vl7p3dv3as

  • MD5

    cd71beb08ca6b582e97eb4104154b009

  • SHA1

    d6875ef9d36960432f3f175123d91ba587c0a879

  • SHA256

    4d0539b3f9eb7d08f259aee1935e7bd75644579c659ac1be2f103988f763d4a8

  • SHA512

    e0cb49327a3aca9d2a17932c794677af0c1ad9c904cbffbd90a913fb1411764ae042589c1374d0fe90d8a16c8d6e5322dc62f2dfda38b7d955b560bd124d1532

Malware Config

Extracted

Family

emotet

Botnet

Epoch1

C2

78.12.27.172:80

91.236.4.234:443

177.139.131.143:443

202.62.39.111:80

91.83.93.124:7080

187.162.248.237:80

192.241.143.52:8080

143.0.87.101:80

185.94.252.13:443

152.170.222.65:80

118.69.71.14:80

178.79.163.131:8080

104.131.41.185:8080

177.73.3.204:80

37.187.6.63:8080

201.213.32.59:80

177.38.15.151:80

104.131.103.37:8080

181.31.211.181:80

164.77.130.222:80

rsa_pubkey.plain

Targets

    • Target

      4d0539b3f9eb7d08f259aee1935e7bd75644579c659ac1be2f103988f763d4a8.exe

    • Size

      92KB

    • MD5

      cd71beb08ca6b582e97eb4104154b009

    • SHA1

      d6875ef9d36960432f3f175123d91ba587c0a879

    • SHA256

      4d0539b3f9eb7d08f259aee1935e7bd75644579c659ac1be2f103988f763d4a8

    • SHA512

      e0cb49327a3aca9d2a17932c794677af0c1ad9c904cbffbd90a913fb1411764ae042589c1374d0fe90d8a16c8d6e5322dc62f2dfda38b7d955b560bd124d1532

    Score
    10/10
    • Emotet

      Emotet is a trojan that is primarily spread through spam emails.

MITRE ATT&CK Matrix

Tasks