General

  • Target

    79256e75ada39e66bdaf72c6c3c52a20f3bd3a3fe5ba1ddf45a223202e68ea50

  • Size

    276KB

  • Sample

    200717-f1cg76j6ne

  • MD5

    dddc76faba329ce4831928afe36ffda7

  • SHA1

    9b02b450682a63080cd6c5d6597a11007a8ef3f2

  • SHA256

    79256e75ada39e66bdaf72c6c3c52a20f3bd3a3fe5ba1ddf45a223202e68ea50

  • SHA512

    e0c3b09d1074dbcd9fa84567e650c4d2416e0e7b25bb8166c419b143e8dddd903ca4c469a65a10cd69a8adbd7e1149b6aa2a59052eb0fde159ae3d3ca724341d

Malware Config

Extracted

Family

emotet

Botnet

Epoch3

C2

177.144.130.105:443

198.27.69.201:8080

157.7.164.178:8081

78.188.170.128:80

203.153.216.178:7080

77.74.78.80:443

178.33.167.120:8080

177.0.241.28:80

143.95.101.72:8080

51.38.201.19:7080

181.167.35.84:80

41.185.29.128:8080

192.163.221.191:8080

181.164.110.7:80

203.153.216.182:7080

80.211.32.88:8080

113.160.180.109:80

185.142.236.163:443

192.241.220.183:8080

87.106.231.60:8080

rsa_pubkey.plain

Targets

    • Target

      79256e75ada39e66bdaf72c6c3c52a20f3bd3a3fe5ba1ddf45a223202e68ea50

    • Size

      276KB

    • MD5

      dddc76faba329ce4831928afe36ffda7

    • SHA1

      9b02b450682a63080cd6c5d6597a11007a8ef3f2

    • SHA256

      79256e75ada39e66bdaf72c6c3c52a20f3bd3a3fe5ba1ddf45a223202e68ea50

    • SHA512

      e0c3b09d1074dbcd9fa84567e650c4d2416e0e7b25bb8166c419b143e8dddd903ca4c469a65a10cd69a8adbd7e1149b6aa2a59052eb0fde159ae3d3ca724341d

    Score
    10/10
    • Emotet

      Emotet is a trojan that is primarily spread through spam emails.

MITRE ATT&CK Matrix

Tasks