General

  • Target
    2026-09-25_e6ad3ac5b4c1b47c211d549aa7972428_elex_emotet_maze
  • Size 61KB
  • Sample260925-wp8bhsshpd
  • SHA256 9a099957eece9799ea438650686fc1a522b9561586e5b12349a39b1b498ab9f0
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Extracted

Family
  • emotet

Botnet
  • Epoch1

C2
  • 186.138.186.74:443

  • 190.24.243.186:80

  • 68.174.15.223:80

  • 68.183.170.114:8080

  • 45.79.95.107:443

  • 192.241.143.52:8080

  • 159.65.241.220:8080

  • 142.93.114.137:8080

  • 70.123.95.180:80

  • 62.75.143.100:7080

  • 91.242.136.103:80

  • 109.169.86.13:8080

  • 202.62.39.111:80

  • 181.231.220.232:80

  • 188.216.24.204:80

  • 86.42.166.147:80

  • 186.15.83.52:8080

  • 178.79.163.131:8080

  • 114.109.179.60:80

  • 110.170.65.146:80

rsa_pubkey.plain

Targets

    • Target
      2026-09-25_e6ad3ac5b4c1b47c211d549aa7972428_elex_emotet_maze
    • Size 61KB
    • SHA256 9a099957eece9799ea438650686fc1a522b9561586e5b12349a39b1b498ab9f0
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Family: Emotet

      Emotet is a trojan that is primarily spread through spam emails.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v16

Tasks