General

  • Target

    abd95bd5aec9828dae680b1056054b817f8565f178ab98ec3e4fa857b4f5e894

  • Size

    57KB

  • Sample

    220306-t8xm1secfr

  • MD5

    d5009f21bd49877d89787fe74dc87af2

  • SHA1

    42c7bba92b20d8ea57fa551d97d3e9ac860b9904

  • SHA256

    abd95bd5aec9828dae680b1056054b817f8565f178ab98ec3e4fa857b4f5e894

  • SHA512

    4db15bd5370b1626dcc6304b589e0066ad41218d5f1d3285ac080cd278a382d6cdb7b6f6e870fceef12f3fea9d960911d92132c5f3450ece5a1f2737759dafea

Malware Config

Extracted

Family

emotet

Botnet

Epoch2

C2

186.4.172.5:443

186.4.172.5:8080

85.25.255.207:8080

185.94.252.13:443

94.177.216.217:8080

124.240.198.66:80

189.209.217.49:80

200.113.106.18:465

200.113.106.18:21

185.187.198.15:80

159.65.25.128:8080

87.106.136.232:8080

83.136.245.190:8080

212.71.234.16:8080

103.39.131.88:80

169.239.182.217:8080

136.243.177.26:8080

167.71.10.37:8080

201.250.54.115:50000

190.226.44.20:21

rsa_pubkey.plain

Targets

    • Target

      abd95bd5aec9828dae680b1056054b817f8565f178ab98ec3e4fa857b4f5e894

    • Size

      57KB

    • MD5

      d5009f21bd49877d89787fe74dc87af2

    • SHA1

      42c7bba92b20d8ea57fa551d97d3e9ac860b9904

    • SHA256

      abd95bd5aec9828dae680b1056054b817f8565f178ab98ec3e4fa857b4f5e894

    • SHA512

      4db15bd5370b1626dcc6304b589e0066ad41218d5f1d3285ac080cd278a382d6cdb7b6f6e870fceef12f3fea9d960911d92132c5f3450ece5a1f2737759dafea

    Score
    10/10
    • Emotet

      Emotet is a trojan that is primarily spread through spam emails.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v6

Tasks