e5ddc0c80d69dc73f31c81b0e6e62d89febd423e2e46240e9526380af1b4372f

General
Target

e5ddc0c80d69dc73f31c81b0e6e62d89febd423e2e46240e9526380af1b4372f

Size

188KB

Sample

210228-m6xrm1gyes

Score
10 /10
MD5

d906984403b6035e3d12ff412a612040

SHA1

c978301e8193e2f8ea9e9a8b39142ba23d2cd001

SHA256

e5ddc0c80d69dc73f31c81b0e6e62d89febd423e2e46240e9526380af1b4372f

SHA512

60ebabffdbf50979249905456a1dd5c047d8c817436ebd0162a4c86c99fa98cb6de463edda1edf594eb87c9990cfaacedd310316c0895b1eeb1b2bb1acc41f2e

Malware Config

Extracted

Family emotet
Botnet Epoch2
C2

72.143.73.234:443

162.241.140.129:8080

104.131.123.136:443

5.196.108.189:8080

62.75.141.82:80

76.175.162.101:80

130.0.132.242:80

79.137.83.50:443

104.131.44.150:8080

109.74.5.95:8080

121.7.31.214:80

176.111.60.55:8080

172.104.97.173:8080

61.19.246.238:443

47.144.21.12:443

110.142.236.207:80

181.169.235.7:80

123.176.25.234:80

185.94.252.104:443

108.46.29.236:80

188.219.31.12:80

80.241.255.202:8080

120.150.60.189:80

85.96.199.93:80

174.45.13.118:80

172.91.208.86:80

139.162.60.124:8080

42.200.107.142:80

216.139.123.119:80

78.24.219.147:8080

139.162.108.71:8080

83.169.36.251:8080

121.124.124.40:7080

91.211.88.52:7080

142.112.10.95:20

50.91.114.38:80

24.43.99.75:80

187.49.206.134:80

97.82.79.83:80

66.65.136.14:80

95.213.236.64:8080

137.59.187.107:8080

74.208.45.104:8080

87.106.136.232:8080

5.196.74.210:8080

203.153.216.189:7080

75.139.38.211:80

24.179.13.119:80

104.131.11.150:443

5.39.91.110:7080

rsa_pubkey.plain
Targets
Target

e5ddc0c80d69dc73f31c81b0e6e62d89febd423e2e46240e9526380af1b4372f

MD5

d906984403b6035e3d12ff412a612040

Filesize

188KB

Score
10/10
SHA1

c978301e8193e2f8ea9e9a8b39142ba23d2cd001

SHA256

e5ddc0c80d69dc73f31c81b0e6e62d89febd423e2e46240e9526380af1b4372f

SHA512

60ebabffdbf50979249905456a1dd5c047d8c817436ebd0162a4c86c99fa98cb6de463edda1edf594eb87c9990cfaacedd310316c0895b1eeb1b2bb1acc41f2e

Tags

Signatures

  • Emotet

    Description

    Emotet is a trojan that is primarily spread through spam emails.

    Tags

  • Emotet Payload

    Description

    Detects Emotet payload in memory.

Related Tasks

MITRE ATT&CK Matrix
Collection
    Command and Control
      Credential Access
        Defense Evasion
          Discovery
            Execution
              Exfiltration
                Impact
                  Initial Access
                    Lateral Movement
                      Persistence
                        Privilege Escalation
                          Tasks

                          static1

                          behavioral1

                          10/10

                          behavioral2

                          10/10