General

  • Target

    e773aabf073167bf43c86d9685bdf2b3009e0beae68bfc6ae2f7113580622a11

  • Size

    100KB

  • Sample

    220521-wy6t2saeg9

  • MD5

    89b297392b8c2a3b8dc5f3fe4caa900a

  • SHA1

    8def89f0528ab58ecc1e5c76b0e69df8d62989ae

  • SHA256

    e773aabf073167bf43c86d9685bdf2b3009e0beae68bfc6ae2f7113580622a11

  • SHA512

    a6c209d540c549a0c3179149c53acfbbdb8193ffa9008e237890d37ec83d378ea481b9a861e715a816583270b93d354e8f4199eb831ff8ab1fcdeee023efaf1b

Malware Config

Extracted

Family

emotet

Botnet

Epoch3

C2

118.110.236.121:8080

149.202.5.139:443

153.92.4.96:8080

51.75.163.68:7080

46.32.229.152:8080

192.241.220.183:8080

173.94.215.84:80

188.0.135.237:80

45.182.161.17:80

74.208.173.91:8080

81.214.253.80:443

157.7.164.178:8081

162.249.220.190:80

192.163.221.191:8080

77.74.78.80:443

175.29.183.2:80

190.190.15.20:80

188.251.213.180:443

222.159.240.58:80

175.139.144.229:8080

rsa_pubkey.plain

Targets

    • Target

      e773aabf073167bf43c86d9685bdf2b3009e0beae68bfc6ae2f7113580622a11

    • Size

      100KB

    • MD5

      89b297392b8c2a3b8dc5f3fe4caa900a

    • SHA1

      8def89f0528ab58ecc1e5c76b0e69df8d62989ae

    • SHA256

      e773aabf073167bf43c86d9685bdf2b3009e0beae68bfc6ae2f7113580622a11

    • SHA512

      a6c209d540c549a0c3179149c53acfbbdb8193ffa9008e237890d37ec83d378ea481b9a861e715a816583270b93d354e8f4199eb831ff8ab1fcdeee023efaf1b

    • Emotet

      Emotet is a trojan that is primarily spread through spam emails.

MITRE ATT&CK Matrix

Tasks