General

  • Target

    babfef79e3c74dc043b99afc20f5647e

  • Size

    493KB

  • Sample

    201117-t4ny7rv5zs

  • MD5

    69dc36916d684aec23a011e6828ffe65

  • SHA1

    c3c2b3185ce413e065fa17811b0a4a790dd30b75

  • SHA256

    e810400a1ff6ae480c90389c9566ed2ddb4d432283a4613acc433836c3338de5

  • SHA512

    04a686b6557961ed96160930974368c346556ab3c9ca494f58797b61ea191734b887f8ae0d3b51e09613d9078b04cf3a907dd54d1960f00c18a248d07d3dd26a

Malware Config

Extracted

Family

emotet

Botnet

Epoch1

C2

190.17.195.202:80

190.143.38.211:80

91.236.4.234:443

104.131.41.185:8080

149.62.173.247:8080

172.104.169.32:8080

190.52.207.190:7080

70.32.115.157:8080

186.68.48.204:443

125.99.61.162:7080

114.109.179.60:80

111.67.12.221:8080

190.186.164.23:80

147.83.10.59:80

191.103.76.34:443

46.28.111.142:7080

89.32.150.160:8080

190.13.215.114:80

5.196.35.138:7080

200.45.187.90:80

rsa_pubkey.plain

Targets

    • Target

      babfef79e3c74dc043b99afc20f5647e

    • Size

      493KB

    • MD5

      69dc36916d684aec23a011e6828ffe65

    • SHA1

      c3c2b3185ce413e065fa17811b0a4a790dd30b75

    • SHA256

      e810400a1ff6ae480c90389c9566ed2ddb4d432283a4613acc433836c3338de5

    • SHA512

      04a686b6557961ed96160930974368c346556ab3c9ca494f58797b61ea191734b887f8ae0d3b51e09613d9078b04cf3a907dd54d1960f00c18a248d07d3dd26a

    • Emotet

      Emotet is a trojan that is primarily spread through spam emails.

MITRE ATT&CK Matrix

Tasks