General

  • Target

    3d20084f9bc987565ed6906950ff66897d2d3bf0dec8641f8e01ccbe3a1b3274

  • Size

    100KB

  • Sample

    200718-7pesg6mxhj

  • MD5

    aaa550fefda59effecbbeb13cd3e3502

  • SHA1

    b88498246e4b795e7a96f2096fd69483221b6e4f

  • SHA256

    3d20084f9bc987565ed6906950ff66897d2d3bf0dec8641f8e01ccbe3a1b3274

  • SHA512

    a28e39a1628f8c85e13f9cf8c9eb797ab7998fdfd101f9a381943822e204e255c0d91cfadbad5c412a889d7161689a2a38bb881476ed984ab90390d19df2ccd4

Malware Config

Extracted

Family

emotet

Botnet

Epoch2

C2

109.117.53.230:443

212.51.142.238:8080

190.160.53.126:80

139.59.60.244:8080

91.211.88.52:7080

190.108.228.62:443

186.208.123.210:443

46.105.131.87:80

173.91.22.41:80

222.214.218.37:4143

31.31.77.83:443

62.75.141.82:80

93.156.165.186:80

93.51.50.171:8080

185.94.252.104:443

78.189.165.52:8080

95.179.229.244:8080

73.11.153.178:8080

203.153.216.189:7080

95.213.236.64:8080

rsa_pubkey.plain

Targets

    • Target

      3d20084f9bc987565ed6906950ff66897d2d3bf0dec8641f8e01ccbe3a1b3274

    • Size

      100KB

    • MD5

      aaa550fefda59effecbbeb13cd3e3502

    • SHA1

      b88498246e4b795e7a96f2096fd69483221b6e4f

    • SHA256

      3d20084f9bc987565ed6906950ff66897d2d3bf0dec8641f8e01ccbe3a1b3274

    • SHA512

      a28e39a1628f8c85e13f9cf8c9eb797ab7998fdfd101f9a381943822e204e255c0d91cfadbad5c412a889d7161689a2a38bb881476ed984ab90390d19df2ccd4

    Score
    10/10
    • Emotet

      Emotet is a trojan that is primarily spread through spam emails.

MITRE ATT&CK Matrix

Tasks