4z1JduAo6vTVAlb7X.exe

General
Target

4z1JduAo6vTVAlb7X.exe

Size

624KB

Sample

210214-b1ycaaz8cj

Score
10 /10
MD5

bd7b570c831e276608a553c80c0271dd

SHA1

ea525cb04f5e75279eca3e0d9f13f77584d720bf

SHA256

bdfd219b02b1b5d7e9828060004bb3746de98ecec4d182205b4b94ecfd406e35

SHA512

6c5bc74364416dc1db69ce604c7ec3664f4f8ba1a8c8dacaffd25d86dd446d754e2ee20f1818b438532e25e7613d3c1e164f7826a5a047cefe94c29acdf24c96

Malware Config

Extracted

Family emotet
Botnet Epoch2
C2

47.146.117.214:80

62.108.54.22:8080

212.51.142.238:8080

190.160.53.126:80

87.106.136.232:8080

74.208.45.104:8080

121.124.124.40:7080

124.45.106.173:443

76.27.179.47:80

210.165.156.91:80

61.19.246.238:443

81.2.235.111:8080

169.239.182.217:8080

181.230.116.163:80

139.130.242.43:80

46.105.131.87:80

139.59.60.244:8080

222.214.218.37:4143

41.60.200.34:80

200.55.243.138:8080

24.234.133.205:80

190.55.181.54:443

189.212.199.126:443

93.156.165.186:80

62.138.26.28:8080

62.75.141.82:80

176.111.60.55:8080

168.235.67.138:7080

109.117.53.230:443

5.196.74.210:8080

162.154.38.103:80

152.168.248.128:443

83.110.223.58:443

95.9.185.228:443

180.92.239.110:8080

209.141.54.221:8080

37.187.72.193:8080

113.160.130.116:8443

85.59.136.180:8080

79.98.24.39:8080

91.231.166.124:8080

185.94.252.104:443

108.48.41.69:80

95.179.229.244:8080

71.208.216.10:80

93.51.50.171:8080

78.24.219.147:8080

24.179.13.119:80

200.41.121.90:80

153.126.210.205:7080

rsa_pubkey.plain
Targets
Target

4z1JduAo6vTVAlb7X.exe

MD5

bd7b570c831e276608a553c80c0271dd

Filesize

624KB

Score
10/10
SHA1

ea525cb04f5e75279eca3e0d9f13f77584d720bf

SHA256

bdfd219b02b1b5d7e9828060004bb3746de98ecec4d182205b4b94ecfd406e35

SHA512

6c5bc74364416dc1db69ce604c7ec3664f4f8ba1a8c8dacaffd25d86dd446d754e2ee20f1818b438532e25e7613d3c1e164f7826a5a047cefe94c29acdf24c96

Tags

Signatures

  • Emotet

    Description

    Emotet is a trojan that is primarily spread through spam emails.

    Tags

  • Emotet Payload

    Description

    Detects Emotet payload in memory.

Related Tasks

MITRE ATT&CK Matrix
Collection
    Command and Control
      Credential Access
        Defense Evasion
          Discovery
            Execution
              Exfiltration
                Impact
                  Initial Access
                    Lateral Movement
                      Persistence
                        Privilege Escalation
                          Tasks

                          static1

                          behavioral1

                          10/10

                          behavioral2

                          10/10