General

  • Target

    97c4828d5a745c607c37cae705488fdeaaec7bdce9916bbcbb531caedb25bd45

  • Size

    219KB

  • Sample

    220302-ej5vrscge4

  • MD5

    3559980bf4c25cd18ac8e3ff8ea898a4

  • SHA1

    6b08ee84800955fbdf26670a374f672dae9b3b68

  • SHA256

    97c4828d5a745c607c37cae705488fdeaaec7bdce9916bbcbb531caedb25bd45

  • SHA512

    d9fc5026bbbbe513cf9758f53ff9e15a9141f88e9b8cd6b59a0e50283da87a214ec43c9f2bd689d9b63abb0099dfc6818ec7d1103bb57de26d2d2a3218be11cb

Malware Config

Extracted

Family

emotet

Botnet

Epoch2

C2

67.163.161.107:80

107.170.146.252:8080

173.212.214.235:7080

167.114.153.111:8080

185.94.252.104:443

110.142.236.207:80

194.187.133.160:443

218.147.193.146:80

172.104.97.173:8080

216.139.123.119:80

50.91.114.38:80

202.134.4.211:8080

113.61.66.94:80

139.99.158.11:443

62.171.142.179:8080

37.139.21.175:8080

190.108.228.27:443

94.23.237.171:443

154.91.33.137:443

201.241.127.190:80

rsa_pubkey.plain

Targets

    • Target

      97c4828d5a745c607c37cae705488fdeaaec7bdce9916bbcbb531caedb25bd45

    • Size

      219KB

    • MD5

      3559980bf4c25cd18ac8e3ff8ea898a4

    • SHA1

      6b08ee84800955fbdf26670a374f672dae9b3b68

    • SHA256

      97c4828d5a745c607c37cae705488fdeaaec7bdce9916bbcbb531caedb25bd45

    • SHA512

      d9fc5026bbbbe513cf9758f53ff9e15a9141f88e9b8cd6b59a0e50283da87a214ec43c9f2bd689d9b63abb0099dfc6818ec7d1103bb57de26d2d2a3218be11cb

    • Emotet

      Emotet is a trojan that is primarily spread through spam emails.

    • Emotet Payload

      Detects Emotet payload in memory.

MITRE ATT&CK Matrix

Tasks