General

  • Target
    2026-09-25_8ab80eeadd145257745ca805c038d1b6_elex_emotet_maze
  • Size 71KB
  • Sample260925-28bpjs1yaz
  • SHA256 4baff4d5f4f31064403a6e6248a3f6576a4eb20eabb619effd84f1d1bc839fad
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Extracted

Family
  • emotet

Botnet
  • Epoch2

C2
  • 1.215.28.101:8080

  • 184.167.148.162:80

  • 66.25.34.20:80

  • 165.227.156.155:443

  • 167.99.105.223:7080

  • 67.225.179.64:8080

  • 176.31.200.130:8080

  • 190.220.19.82:443

  • 91.242.138.5:443

  • 159.65.25.128:8080

  • 61.197.110.214:80

  • 110.143.84.202:80

  • 95.128.43.213:8080

  • 91.73.197.90:80

  • 201.184.105.242:443

  • 108.179.206.219:8080

  • 181.57.193.14:80

  • 188.152.7.140:80

  • 139.130.241.252:443

  • 197.254.221.174:80

rsa_pubkey.plain

Targets

    • Target
      2026-09-25_8ab80eeadd145257745ca805c038d1b6_elex_emotet_maze
    • Size 71KB
    • SHA256 4baff4d5f4f31064403a6e6248a3f6576a4eb20eabb619effd84f1d1bc839fad
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Family: Emotet

      Emotet is a trojan that is primarily spread through spam emails.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v16

Tasks