General

  • Target

    000e04e6763ce064de57f0f4fcd58559d095d4b5865415fbeb9e4f9679dab419

  • Size

    456KB

  • Sample

    230612-wltnysdg6v

  • MD5

    368d7095ca1d0c5f5271a4ef82e1a4d0

  • SHA1

    19ec9b25d24dffcb9df18ba903c85c03b6e5def9

  • SHA256

    000e04e6763ce064de57f0f4fcd58559d095d4b5865415fbeb9e4f9679dab419

  • SHA512

    06cfc51968d507c5231d7e4cd94f9b606583e3a9b8a0f254bc668ced012b9dd6c611320bf1009a41302cdc19aea9a69e34add97498212b3c6e2baec75942cd2f

  • SSDEEP

    12288:wVIsyDV7GQaTSrQRo9Jx3w8n/vEhZhRg:hsyZ7flr9PEQ

Malware Config

Extracted

Family

emotet

Botnet

Epoch1

C2

78.206.229.130:80

104.131.92.244:8080

70.39.251.94:8080

87.230.25.43:8080

79.118.74.90:80

82.76.111.249:443

82.76.52.155:80

212.71.237.140:8080

188.251.213.180:80

103.236.179.162:80

1.226.84.243:8080

70.32.84.74:8080

2.84.12.98:80

201.213.177.139:80

177.73.0.98:443

170.81.48.2:80

129.232.220.11:8080

177.144.130.105:8080

213.52.74.198:80

120.72.18.91:80

rsa_pubkey.plain

Targets

    • Target

      000e04e6763ce064de57f0f4fcd58559d095d4b5865415fbeb9e4f9679dab419

    • Size

      456KB

    • MD5

      368d7095ca1d0c5f5271a4ef82e1a4d0

    • SHA1

      19ec9b25d24dffcb9df18ba903c85c03b6e5def9

    • SHA256

      000e04e6763ce064de57f0f4fcd58559d095d4b5865415fbeb9e4f9679dab419

    • SHA512

      06cfc51968d507c5231d7e4cd94f9b606583e3a9b8a0f254bc668ced012b9dd6c611320bf1009a41302cdc19aea9a69e34add97498212b3c6e2baec75942cd2f

    • SSDEEP

      12288:wVIsyDV7GQaTSrQRo9Jx3w8n/vEhZhRg:hsyZ7flr9PEQ

    • Emotet

      Emotet is a trojan that is primarily spread through spam emails.

    • Emotet payload

      Detects Emotet payload in memory.

MITRE ATT&CK Matrix

Tasks