General

  • Target

    e75d40893d773bb691c30aab1847ffb28c3f8f345e484ccf3ac5459ed54866d5

  • Size

    100KB

  • Sample

    220521-wy724saeh3

  • MD5

    7b0cc331620ff09dd949c2f3d429fed6

  • SHA1

    802662a1fa0b0e166d65c1ab5d96abcd36341fb7

  • SHA256

    e75d40893d773bb691c30aab1847ffb28c3f8f345e484ccf3ac5459ed54866d5

  • SHA512

    fbbbca8f8963a21f20b15c9334a10165fdf0c99e5caef000b2f5a905e454fab8e58d15ed240eadf6082ec74506c2ec8bb5812363b5c8190581d5a5b9312bccfc

Malware Config

Extracted

Family

emotet

Botnet

Epoch1

C2

50.121.220.50:80

51.75.33.122:80

54.37.42.48:8080

91.121.54.71:8080

83.169.21.32:7080

68.69.155.181:80

67.247.242.247:80

213.197.182.158:8080

45.173.88.33:80

111.67.12.221:8080

217.13.106.14:8080

191.99.160.58:80

178.148.55.236:8080

85.109.159.61:443

110.142.219.51:80

50.28.51.143:8080

77.90.136.129:8080

209.236.123.42:8080

72.135.200.124:80

184.66.18.83:80

rsa_pubkey.plain

Targets

    • Target

      e75d40893d773bb691c30aab1847ffb28c3f8f345e484ccf3ac5459ed54866d5

    • Size

      100KB

    • MD5

      7b0cc331620ff09dd949c2f3d429fed6

    • SHA1

      802662a1fa0b0e166d65c1ab5d96abcd36341fb7

    • SHA256

      e75d40893d773bb691c30aab1847ffb28c3f8f345e484ccf3ac5459ed54866d5

    • SHA512

      fbbbca8f8963a21f20b15c9334a10165fdf0c99e5caef000b2f5a905e454fab8e58d15ed240eadf6082ec74506c2ec8bb5812363b5c8190581d5a5b9312bccfc

    • Emotet

      Emotet is a trojan that is primarily spread through spam emails.

MITRE ATT&CK Matrix

Tasks