General

  • Target
    720c106d35cd7a54253a30b08d0cadee39ff309fd5d04396c9f87f8433829a98
  • Size 824KB
  • Sample201109-er7txc18k2
  • SHA256 720c106d35cd7a54253a30b08d0cadee39ff309fd5d04396c9f87f8433829a98
  • MD5 SHA1 SHA512

Malware Config

Extracted

Family
  • emotet

Botnet
  • Epoch2

C2
  • 84.21.179.51:80

  • 95.216.118.202:8080

  • 98.15.140.226:80

  • 176.9.43.37:8080

  • 62.75.141.82:80

  • 60.250.78.22:443

  • 95.128.43.213:8080

  • 195.244.215.206:80

  • 78.189.165.52:8080

  • 104.131.44.150:8080

  • 93.51.50.171:8080

  • 59.20.65.102:80

  • 195.76.232.114:80

  • 95.213.236.64:8080

  • 186.208.123.210:443

  • 50.116.86.205:8080

  • 160.16.215.66:8080

  • 24.94.237.248:80

  • 114.145.241.208:80

  • 176.111.60.55:8080

rsa_pubkey.plain

Targets

    • Target
      720c106d35cd7a54253a30b08d0cadee39ff309fd5d04396c9f87f8433829a98
    • Size 824KB
    • SHA256 720c106d35cd7a54253a30b08d0cadee39ff309fd5d04396c9f87f8433829a98
    • MD5 SHA1 SHA512
    • Emotet

      Emotet is a trojan that is primarily spread through spam emails.

MITRE ATT&CK Matrix

Tasks