General

  • Target

    406d3f947a4f4b722802fde6c6d6e40bb63d855f61d7d1558ad3ec8c6e175e33

  • Size

    361KB

  • Sample

    201018-9tl2n28ht2

  • MD5

    d06934e9385d5698b3e6c170e2c80acd

  • SHA1

    7b0e1fea0ca1eefc421b86bb3fd707c1cc2ecba6

  • SHA256

    406d3f947a4f4b722802fde6c6d6e40bb63d855f61d7d1558ad3ec8c6e175e33

  • SHA512

    7b878265623098da452a8455fa2fdfbc061321159c6945ccd55544d0b7fad1f049861ebb82cc469dc6ffb623732d96a73db8db5a331bd38bce4425f9f10dd853

Malware Config

Extracted

Family

emotet

Botnet

Epoch3

C2

221.147.142.214:80

188.40.170.197:80

51.38.50.144:8080

46.22.116.163:7080

190.151.5.131:443

58.27.215.3:8080

179.5.118.12:80

73.100.19.104:80

192.210.217.94:8080

192.163.221.191:8080

103.93.220.182:80

91.213.106.100:8080

190.192.39.136:80

115.79.59.157:80

190.164.135.81:80

91.83.93.103:443

188.166.220.180:7080

116.202.10.123:8080

36.91.44.183:80

77.74.78.80:443

rsa_pubkey.plain

Targets

    • Target

      406d3f947a4f4b722802fde6c6d6e40bb63d855f61d7d1558ad3ec8c6e175e33

    • Size

      361KB

    • MD5

      d06934e9385d5698b3e6c170e2c80acd

    • SHA1

      7b0e1fea0ca1eefc421b86bb3fd707c1cc2ecba6

    • SHA256

      406d3f947a4f4b722802fde6c6d6e40bb63d855f61d7d1558ad3ec8c6e175e33

    • SHA512

      7b878265623098da452a8455fa2fdfbc061321159c6945ccd55544d0b7fad1f049861ebb82cc469dc6ffb623732d96a73db8db5a331bd38bce4425f9f10dd853

    Score
    10/10
    • Emotet

      Emotet is a trojan that is primarily spread through spam emails.

    • Emotet Payload

      Detects Emotet payload in memory.

MITRE ATT&CK Matrix

Tasks