General

  • Target

    4250a3ab9044b4a3a5f8319e712306bb06df61b1dee8b608505c026bacba4aa1

  • Size

    92KB

  • Sample

    220307-m33hradfb6

  • MD5

    f8d22030e23927096b236c6e4d91d961

  • SHA1

    4a8084d42e1be3c2fdb1cc22a0068892add6c4fc

  • SHA256

    4250a3ab9044b4a3a5f8319e712306bb06df61b1dee8b608505c026bacba4aa1

  • SHA512

    93179b765204b7486427b4ab3b5e4a365be9c8fae8ae5dc8bd6c9f6ed5c1ae1ddec1de1b5e35a15a66f46ca1009e8dc9077af3ec8be8fa566a58f1196d191c63

Malware Config

Extracted

Family

emotet

Botnet

Epoch2

C2

68.44.137.144:443

82.223.70.24:8080

101.187.104.105:80

178.20.74.212:80

98.15.140.226:80

209.97.168.52:8080

74.208.45.104:8080

169.239.182.217:8080

176.111.60.55:8080

87.106.136.232:8080

46.105.131.69:443

93.51.50.171:8080

62.75.187.192:8080

185.94.252.104:443

190.160.53.126:80

50.116.86.205:8080

80.102.134.174:8080

110.145.77.103:80

113.160.130.116:8443

60.130.173.117:80

rsa_pubkey.plain

Targets

    • Target

      4250a3ab9044b4a3a5f8319e712306bb06df61b1dee8b608505c026bacba4aa1

    • Size

      92KB

    • MD5

      f8d22030e23927096b236c6e4d91d961

    • SHA1

      4a8084d42e1be3c2fdb1cc22a0068892add6c4fc

    • SHA256

      4250a3ab9044b4a3a5f8319e712306bb06df61b1dee8b608505c026bacba4aa1

    • SHA512

      93179b765204b7486427b4ab3b5e4a365be9c8fae8ae5dc8bd6c9f6ed5c1ae1ddec1de1b5e35a15a66f46ca1009e8dc9077af3ec8be8fa566a58f1196d191c63

    • Emotet

      Emotet is a trojan that is primarily spread through spam emails.

MITRE ATT&CK Matrix

Tasks