6271467933302784.zip

General
Target

6271467933302784.zip

Size

151KB

Sample

210916-n4f7ksgbbk

Score
10 /10
MD5

c872bcbf7e1dab7ff284a1a16d8c6780

SHA1

07ce9811b78f52f90710d15af98c334eb94abf54

SHA256

00854a6002b2b1218400be6d65bead8923424481ffd84d881445451e840e8169

SHA512

fde6be8ad4b9ba98632361e61bc9a18f202f7e84f0ff0048981860a5f65e3e67c21c0e8f43809e310700b6171f684135edadaf1b1ae66aaeaf277c20569e445c

Malware Config

Extracted

Family emotet
Botnet Epoch2
C2

124.240.198.66:80

186.75.241.230:80

181.143.194.138:443

45.79.188.67:8080

77.237.248.136:8080

185.142.236.163:443

63.142.253.122:8080

178.254.6.27:7080

190.211.207.11:443

78.188.105.159:21

182.176.106.43:995

178.79.161.166:443

206.189.98.125:8080

87.230.19.21:8080

80.11.163.139:443

101.187.237.217:20

190.18.146.70:80

86.98.25.30:53

92.222.125.16:7080

186.4.172.5:443

169.239.182.217:8080

189.209.217.49:80

104.236.246.93:8080

190.228.72.244:53

88.247.163.44:80

45.123.3.54:443

91.205.215.66:8080

190.106.97.230:443

199.19.237.192:80

186.4.172.5:20

94.205.247.10:80

104.131.11.150:8080

144.139.247.220:80

119.15.153.237:80

173.212.203.26:8080

136.243.177.26:8080

5.196.74.210:8080

85.104.59.244:20

190.186.203.55:80

187.144.189.58:50000

78.24.219.147:8080

186.4.172.5:8080

46.105.131.87:80

149.167.86.174:990

222.214.218.192:8080

88.156.97.210:80

185.94.252.13:443

190.226.44.20:21

217.145.83.44:80

80.11.163.139:21

rsa_pubkey.plain
Targets
Target

381fe5b3c4d640baf1495ad7f3e111af78c88df250895d87979834f952953580

MD5

604a044f20590d8486489d2b736e47fa

Filesize

474KB

Score
10 /10
SHA1

8152a4a20292751f381b4a6d0bbce1c2f04739af

SHA256

381fe5b3c4d640baf1495ad7f3e111af78c88df250895d87979834f952953580

SHA512

89ba0d68c69ceef5956e692c2b6a8c07ff62ff0f1931b339d60252481864960c0109cd19731fca10acd659c3f7f52f7b94d8b060d4cf6483c653967dc1eedf39

Tags

Signatures

  • Emotet

    Description

    Emotet is a trojan that is primarily spread through spam emails.

    Tags

  • Drops file in System32 directory

Related Tasks

MITRE ATT&CK Matrix
Collection
    Command and Control
      Credential Access
        Defense Evasion
          Execution
            Exfiltration
              Impact
                Initial Access
                  Lateral Movement
                    Persistence
                      Privilege Escalation
                        Tasks

                        static1

                        9/10

                        behavioral1

                        10/10

                        behavioral2

                        10/10