General

  • Target
    1275d1d7336acbed34142c9727384765a493d6c585fb6b9f2d5c913068d170da
  • Size 416KB
  • Sample201111-g86zsxtlp6
  • SHA256 1275d1d7336acbed34142c9727384765a493d6c585fb6b9f2d5c913068d170da
  • MD5 SHA1 SHA512

Malware Config

Extracted

Family
  • emotet

Botnet
  • Epoch3

C2
  • 27.78.27.110:443

  • 81.241.22.161:20

  • 91.121.200.35:8080

  • 159.203.16.11:8080

  • 188.226.165.170:8080

  • 115.79.195.246:80

  • 153.204.122.254:80

  • 77.74.78.80:443

  • 37.205.9.252:7080

  • 36.91.44.183:80

  • 58.94.58.13:80

  • 37.46.129.215:8080

  • 172.96.190.154:8080

  • 157.7.164.178:8081

  • 175.103.38.146:80

  • 103.229.73.17:8080

  • 45.239.204.100:80

  • 5.12.246.155:80

  • 179.5.118.12:80

  • 185.80.172.199:80

rsa_pubkey.plain

Targets

    • Target
      1275d1d7336acbed34142c9727384765a493d6c585fb6b9f2d5c913068d170da
    • Size 416KB
    • SHA256 1275d1d7336acbed34142c9727384765a493d6c585fb6b9f2d5c913068d170da
    • MD5 SHA1 SHA512
    • Emotet

      Emotet is a trojan that is primarily spread through spam emails.

    • Emotet Payload

      Detects Emotet payload in memory.

MITRE ATT&CK Matrix

Tasks