General

  • Target
    2026-07-21_0632176e9ace86f86cc16d5751705e4d_elex_emotet_maze
  • Size 78KB
  • Sample260721-q4dgssvxbs
  • SHA256 bc3dd6be2f88df0672eca70c0eb1fbc9f3e632fab030192ab71ae689df3035d7
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Extracted

Family
  • emotet

Botnet
  • Epoch1

C2
  • 104.236.137.72:8080

  • 172.104.233.225:8080

  • 81.169.140.14:443

  • 213.189.36.51:8080

  • 87.106.77.40:7080

  • 86.42.166.147:80

  • 200.113.106.18:80

  • 45.79.95.107:443

  • 125.99.61.162:7080

  • 181.16.17.210:443

  • 207.154.204.40:8080

  • 91.204.163.19:8090

  • 201.190.133.235:8080

  • 91.83.93.124:7080

  • 163.172.40.218:7080

  • 149.62.173.247:8080

  • 189.173.113.67:443

  • 68.183.190.199:8080

  • 190.210.184.138:995

  • 142.127.57.63:8080

rsa_pubkey.plain

Targets

    • Target
      2026-07-21_0632176e9ace86f86cc16d5751705e4d_elex_emotet_maze
    • Size 78KB
    • SHA256 bc3dd6be2f88df0672eca70c0eb1fbc9f3e632fab030192ab71ae689df3035d7
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Family: Emotet

      Emotet is a trojan that is primarily spread through spam emails.

MITRE ATT&CK Enterprise v16

Tasks