Emotet E1 Splits into E1/E3 - 2019/09/17

Special #Emotet Report brought to you by the work of @lazyactivist192 and @ps66uk and The Cryptolaemus Team

E1 splits into E1 and E3.
15:30 EDT: Updated E3 C2s from @lazyactivist192

New E3:
-----BEGIN PUBLIC KEY-----
MHwwDQYJKoZIhvcNAQEBBQADawAwaAJhAM426uN11n2LZDk/JiS93WIWG7fGCQmP
4h5yIJUxJwrjwtGVexCelD2WKrDw9sa/xKwmQKk3b2fUhwnHXjoSpR7pLaDo7pEc
iJB5y6hjbPyrSfL3Fxu74M2SAS0Arj3uAQIDAQAB
-----END PUBLIC KEY-----

Binary Hash:
e926866392520a383c71cf860ed7ef12e8887ffa82dfb517be28413b7521489c

C2s:
70.45.30.28:80
78.109.34.178:443
152.168.220.188:80
83.110.75.153:8090
190.146.81.138:8090
45.33.1.161:8080
192.163.221.191:8080
190.13.146.47:443
139.59.242.76:8080
203.150.19.63:443
190.104.64.197:443
190.171.105.158:7080
216.154.222.52:7080
190.55.86.138:8443
216.70.88.55:8080
178.249.187.150:7080
159.69.211.211:7080
190.55.39.215:80
201.113.23.175:443
46.32.229.152:8080
149.202.153.251:8080
83.169.33.157:8080
190.10.194.42:8080
200.82.147.93:7080
181.230.126.152:8090
108.179.216.46:8080
190.92.103.7:80
138.197.140.163:8080



Current E1:
-----BEGIN PUBLIC KEY-----
MHwwDQYJKoZIhvcNAQEBBQADawAwaAJhAOzoTryw1r9RxRJPFKalO4+q7JaDZWSB
KZlEc22H6ITuE06tvJspue42TF1yk8xN+1bqW++QeV6Clm1uRswA/qoao/6p4eN0
h4zIO8PEaJ0C/9EO4cx9yfRLlVpjdEkP0QIDAQAB
-----END PUBLIC KEY-----


Binary Hash:
c348b2a24467c3410275d0d16c52463b7bdb5a424da7315a4d97e047403b3450

C2s:
187.155.233.46:443
83.29.180.97:8080
181.36.42.205:443
200.21.90.6:8080
123.168.4.66:22
151.80.142.33:80
159.65.241.220:8080
109.104.79.48:8080
43.229.62.186:8080
72.47.248.48:8080
190.1.37.125:443
46.29.183.211:8080
91.205.215.57:7080
178.79.163.131:8080
187.188.166.192:80
190.230.60.129:80
181.188.149.134:80
125.99.61.162:7080
77.245.101.134:8080
138.68.106.4:7080
187.242.204.142:80
190.19.42.131:80
213.120.104.180:50000
149.62.173.247:8080
181.48.174.242:80
80.85.87.122:8080
183.82.97.25:80
185.86.148.222:8080
90.69.208.50:7080
91.83.93.124:7080
183.87.87.73:80
62.210.142.58:8080
186.83.133.253:8080
109.169.86.13:8080
179.62.18.56:443
81.169.140.14:443
187.144.227.2:7080
69.163.33.82:8080
88.250.223.190:8080
190.230.60.129:80
37.59.1.74:8080
203.25.159.3:8080
79.143.182.254:8080
200.57.102.71:8443
217.199.175.216:8080
201.219.183.243:443
196.6.112.70:443
200.58.171.51:80
5.77.13.70:80
217.113.27.158:443
46.249.204.99:8080
159.203.204.126:8080
170.247.122.37:8080
200.80.198.34:80
62.75.143.100:7080
89.188.124.145:443
143.0.245.169:8080
190.117.206.153:443
77.122.183.203:8080
46.21.105.59:8080
181.39.134.122:80
86.42.166.147:80
23.92.22.225:7080

I had seen some of this last night but was out of time to figure it out for the reports. These guys just put it together and we wanted to publish this breaking news now!

-@JRoosen
--Special Update 2019/09/17 @15:00EDT