Description
Emotet is a trojan that is primarily spread through spam emails.
102753c9d5d8ceea33e9be91d7eb1a4a1ab99159e32e3e4c0270749bf5f31b77
362KB
220521-xpdycafecq
c229d3bd892f20fb49c35104437411d3
30400e7c72e340eca84ae13ddc1203156ff618f0
102753c9d5d8ceea33e9be91d7eb1a4a1ab99159e32e3e4c0270749bf5f31b77
86967c8bbe6e05c8396d5c343b767f1cd1ad410ef7ae2c6c6fe13396a93740e09ac47597355ed7502dd9351c385a5d68696e95e76f925dddc43b77c077478276
Family | emotet |
Botnet | Epoch5 |
C2 |
194.9.172.107:8080 66.42.57.149:443 165.22.73.229:8080 202.29.239.162:443 76.189.152.228:1645 59.185.164.123:8382 115.19.43.159:30377 104.248.225.227:8080 54.38.242.185:443 103.133.214.242:8080 78.47.204.80:443 210.57.209.142:8080 103.41.204.169:8080 118.98.72.86:443 88.217.172.165:8080 87.106.97.83:7080 85.25.120.45:8080 195.77.239.39:8080 37.44.244.177:8080 36.67.23.59:443 93.41.142.108:30345 42.6.66.255:39545 160.16.143.191:7080 38.217.125.207:49663 54.38.143.246:7080 159.69.237.188:443 68.183.93.250:443 54.37.228.122:443 190.90.233.66:443 37.59.209.141:8080 29.146.139.51:30005 18.37.240.161:6409 178.62.112.199:8080 59.148.253.194:443 196.44.98.190:8080 79.235.8.209:58224 202.28.34.99:8080 78.46.73.125:443 51.68.141.164:8080 207.148.81.119:8080 93.104.209.107:8080 185.148.168.220:8080 100.21.231.107:63582 103.85.95.4:8080 62.171.178.147:8080 175.126.176.79:8080 134.122.119.23:8080 202.134.4.210:7080 116.124.128.206:8080 45.71.195.104:8080 |
eck1.plain |
|
eck1.plain |
|
102753c9d5d8ceea33e9be91d7eb1a4a1ab99159e32e3e4c0270749bf5f31b77
c229d3bd892f20fb49c35104437411d3
362KB
30400e7c72e340eca84ae13ddc1203156ff618f0
102753c9d5d8ceea33e9be91d7eb1a4a1ab99159e32e3e4c0270749bf5f31b77
86967c8bbe6e05c8396d5c343b767f1cd1ad410ef7ae2c6c6fe13396a93740e09ac47597355ed7502dd9351c385a5d68696e95e76f925dddc43b77c077478276
Emotet is a trojan that is primarily spread through spam emails.
suricata: ET MALWARE W32/Emotet CnC Beacon 3