Advertisement
jroosen

Emotet C2 and RSA Key Update 2020/02/19

Feb 19th, 2020
7,938
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 10.21 KB | None | 0 0
  1. ## Emotet C2 and RSA Key Update 02/19/2020 as of 02/19/20 at 20:45 EST ##
  2.  
  3. Key and current C2 list below for each Epoch:
  4.  
  5. ### C2's Per Epoch ###
  6.  
  7. #### Epoch 1 C2s ####
  8. ```
  9. 187.162.250.23:80
  10. 187.208.252.175:8443
  11. 185.10.202.137:8080
  12. 103.31.232.93:443
  13. 12.162.84.2:8080
  14. 120.151.194.117:80
  15. 72.47.248.48:7080
  16. 91.205.215.57:7080
  17. 189.123.239.235:80
  18. 181.231.220.232:80
  19. 114.109.179.60:80
  20. 147.83.10.212:80
  21. 177.66.190.130:80
  22. 117.7.236.115:80
  23. 88.249.1.225:443
  24. 191.183.21.190:80
  25. 70.32.115.157:8080
  26. 104.131.41.185:8080
  27. 86.42.166.147:80
  28. 73.239.11.159:80
  29. 172.221.229.86:80
  30. 177.103.159.44:80
  31. 201.213.100.141:8080
  32. 190.186.164.23:80
  33. 5.45.108.146:8080
  34. 191.103.76.34:443
  35. 46.28.111.142:7080
  36. 49.176.162.90:443
  37. 201.82.155.121:80
  38. 61.92.159.208:8080
  39. 181.30.69.50:80
  40. 186.68.48.204:443
  41. 189.1.185.248:80
  42. 200.82.170.231:80
  43. 190.143.38.211:80
  44. 143.0.87.101:80
  45. 191.92.120.49:80
  46. 181.36.42.205:443
  47. 115.160.150.86:80
  48. 70.184.69.146:80
  49. 190.70.1.69:80
  50. 188.216.24.204:80
  51. 217.199.160.224:8080
  52. 181.52.73.233:80
  53. 147.83.10.59:80
  54. 77.55.211.77:8080
  55. 203.45.161.179:443
  56. 179.127.59.210:443
  57. 190.188.51.185:80
  58. 190.210.184.138:995
  59. 181.31.211.181:80
  60. 41.60.202.26:443
  61. 200.58.83.179:80
  62. 74.101.225.121:443
  63. 120.150.76.215:80
  64. 91.219.169.180:80
  65. 94.176.234.118:443
  66. 187.188.163.98:80
  67. 190.17.195.202:80
  68. 185.94.252.13:443
  69. 185.94.252.12:80
  70. 110.145.124.178:443
  71. 59.120.5.154:80
  72. 83.169.21.32:7080
  73. 152.170.196.157:443
  74. 190.195.129.227:8090
  75. 186.3.232.68:80
  76. 177.72.13.80:80
  77. 177.6.166.4:80
  78. 189.220.246.167:80
  79. 82.196.15.205:8080
  80. 118.69.71.14:80
  81. 129.205.201.163:80
  82. 89.211.112.137:80
  83. 77.90.136.129:8080
  84. 190.219.149.236:80
  85. 202.62.39.111:80
  86. 203.25.159.3:8080
  87. 192.241.146.84:8080
  88. 152.169.32.195:80
  89. 111.67.12.221:8080
  90. 104.131.103.37:8080
  91. 201.17.193.151:443
  92. 181.12.187.239:80
  93. 82.8.232.51:80
  94. 139.218.104.239:80
  95. 89.19.20.202:443
  96. 37.187.6.63:8080
  97. 212.71.237.140:8080
  98. 181.54.245.85:8080
  99. 204.225.249.100:7080
  100. 178.79.163.131:8080
  101. 200.127.51.94:80
  102. 149.62.173.247:8080
  103. 68.174.15.223:80
  104. 172.104.169.32:8080
  105. 181.60.247.8:443
  106. 175.139.209.3:8080
  107. 81.16.1.45:80
  108. 190.13.215.114:80
  109. 189.14.80.194:443
  110. 94.76.247.61:8080
  111. 187.162.248.237:80
  112. 181.122.172.67:8080
  113. 189.19.81.181:443
  114. 175.114.178.83:443
  115. 79.10.57.78:80
  116. 5.196.35.138:7080
  117. 186.138.186.74:443
  118. 185.94.252.27:443
  119. 91.236.4.234:443
  120. 68.183.170.114:8080
  121. 104.236.161.64:8080
  122. 138.68.106.4:7080
  123. 190.52.207.190:7080
  124. 186.250.113.201:80
  125. 91.83.93.124:7080
  126. 89.216.23.167:80
  127. 190.165.21.5:80
  128. 86.247.108.13:8080
  129. 68.183.190.199:8080
  130. 190.24.243.186:80
  131. 181.60.244.48:8080
  132. 201.213.32.59:80
  133. 190.2.31.172:80
  134. 182.191.75.93:443
  135. 110.145.101.66:443
  136. ```
  137. ### Epoch 1 C2 Changes ###
  138. ```
  139. Dropped:
  140. 189.173.177.96:443
  141. 1.9.150.202:80
  142. 185.32.46.109:80
  143. 62.75.160.178:8080
  144. 181.10.204.106:80
  145. 192.241.143.52:8080
  146. 93.147.157.195:80
  147. 210.186.132.68:80
  148. 152.168.82.36:443
  149. 200.45.187.90:80
  150. 50.28.51.143:8080
  151. 200.58.180.130:80
  152. 70.32.84.74:8080
  153. 190.57.130.142:443
  154.  
  155. Added:
  156. 187.162.250.23:80
  157. 187.208.252.175:8443
  158. 120.151.194.117:80
  159. 91.205.215.57:7080
  160. 88.249.1.225:443
  161. 49.176.162.90:443
  162. 190.70.1.69:80
  163. 190.195.129.227:8090
  164. 177.6.166.4:80
  165. 189.220.246.167:80
  166. 204.225.249.100:7080
  167. 189.14.80.194:443
  168. 189.19.81.181:443
  169. 79.10.57.78:80
  170. 201.213.32.59:80
  171. ```
  172. #### Current Epoch 1 RSA Public Key ####
  173. ```
  174. MHwwDQYJKoZIhvcNAQEBBQADawAwaAJhAOZ9fLJ8UrI0OZURpPsR3eijAyfPj3z6
  175. uS75f2igmYFW2aWgNcFIzsAYQleKzD0nlCFHOo7Zf8/4wY2UW0CJ4dJEHnE/PHlz
  176. 6uNk3pxjm7o4eCDyiJbzf+k0Azjl0q54FQIDAQAB
  177. ```
  178. #### Epoch 2 C2s ####
  179. ```
  180. 173.79.107.84:80
  181. 24.249.73.48:80
  182. 136.243.250.34:8080
  183. 212.71.234.16:8080
  184. 70.180.35.211:80
  185. 72.202.237.228:80
  186. 88.249.120.205:80
  187. 120.151.135.224:80
  188. 78.186.5.109:443
  189. 178.153.176.124:80
  190. 200.21.90.5:443
  191. 209.141.54.221:8080
  192. 162.241.92.219:8080
  193. 168.235.67.138:7080
  194. 153.181.212.155:80
  195. 91.205.215.66:443
  196. 173.31.172.11:80
  197. 110.145.77.103:80
  198. 139.130.242.43:80
  199. 108.6.170.195:80
  200. 73.234.2.52:80
  201. 209.97.168.52:8080
  202. 76.104.80.47:80
  203. 108.191.2.72:80
  204. 62.75.187.192:8080
  205. 211.63.71.72:8080
  206. 105.247.123.133:8080
  207. 179.13.185.19:80
  208. 64.184.36.98:8080
  209. 60.231.217.199:8080
  210. 104.236.28.47:8080
  211. 46.105.131.69:443
  212. 68.202.51.4:80
  213. 50.91.82.212:443
  214. 105.27.155.182:80
  215. 92.222.216.44:8080
  216. 24.164.79.147:8080
  217. 118.69.70.109:80
  218. 59.103.164.174:80
  219. 24.105.202.216:443
  220. 152.168.28.89:443
  221. 197.232.17.199:7080
  222. 74.208.45.104:8080
  223. 104.36.41.18:443
  224. 91.242.136.103:80
  225. 50.116.86.205:8080
  226. 180.92.239.110:8080
  227. 87.127.197.7:8080
  228. 120.150.246.241:80
  229. 162.255.112.157:443
  230. 5.32.55.214:80
  231. 218.255.173.106:80
  232. 101.187.197.33:443
  233. 169.239.182.217:8080
  234. 31.31.77.83:443
  235. 206.81.10.215:8080
  236. 5.39.91.110:7080
  237. 31.172.240.91:8080
  238. 65.184.222.119:80
  239. 223.197.185.60:80
  240. 46.105.131.87:80
  241. 98.15.140.226:80
  242. 71.126.247.90:80
  243. 136.243.205.112:7080
  244. 101.100.137.135:80
  245. 195.244.215.206:80
  246. 190.146.205.227:8080
  247. 60.250.78.22:443
  248. 37.139.21.175:8080
  249. 190.114.244.182:443
  250. 71.222.233.135:443
  251. 181.143.126.170:80
  252. 190.143.39.231:80
  253. 59.148.227.190:80
  254. 190.189.224.117:80
  255. 160.16.215.66:8080
  256. 59.20.65.102:80
  257. 212.174.19.87:80
  258. 209.137.209.84:443
  259. 45.33.49.124:443
  260. 67.215.46.58:80
  261. 163.139.237.65:80
  262. 210.6.85.121:80
  263. 174.83.116.77:80
  264. 181.126.70.117:80
  265. 190.53.135.159:21
  266. 152.168.248.128:443
  267. 62.138.26.28:8080
  268. 5.196.74.210:8080
  269. 23.92.16.164:8080
  270. 104.131.44.150:8080
  271. 103.86.49.11:8080
  272. 45.55.65.123:8080
  273. 101.187.134.207:8080
  274. 188.0.135.237:80
  275. 186.4.172.5:8080
  276. 70.127.155.33:80
  277. 87.106.136.232:8080
  278. 217.160.182.191:8080
  279. 211.192.153.224:80
  280. 47.153.183.211:80
  281. 62.75.141.82:80
  282. 123.202.209.62:80
  283. 185.94.252.104:443
  284. 24.204.47.87:80
  285. 202.175.121.202:8090
  286. 95.128.43.213:8080
  287. 190.220.19.82:443
  288. 47.47.196.171:80
  289. 115.65.111.148:443
  290. 149.202.153.252:8080
  291. 139.130.241.252:443
  292. 125.207.127.86:80
  293. 24.179.13.67:80
  294. 71.202.49.79:80
  295. 121.88.5.176:443
  296. 24.196.13.216:80
  297. 47.6.15.79:443
  298. 174.53.195.88:80
  299. 98.156.206.153:80
  300. 74.108.124.180:80
  301. 95.213.236.64:8080
  302. 87.106.139.101:8080
  303. 104.236.246.93:8080
  304. 176.9.43.37:8080
  305. 104.131.11.150:443
  306. 41.60.200.34:80
  307. ```
  308. ### Epoch 2 C2 Changes ###
  309. ```
  310. Dropped:
  311. 187.156.77.88:8080
  312. 85.105.205.77:8080
  313. 50.251.171.165:80
  314. 205.185.117.108:8080
  315. 2.237.76.249:80
  316. 74.105.117.118:8080
  317. 100.6.23.40:80
  318. 47.6.15.79:80
  319. 108.179.206.219:8080
  320. 75.114.235.105:80
  321. 64.66.6.71:8080
  322. 173.21.26.90:80
  323. 78.24.219.147:8080
  324. 68.114.229.171:80
  325. 190.55.181.54:443
  326. 85.152.174.56:80
  327. 178.20.74.212:80
  328. 78.189.180.107:80
  329. 37.187.72.193:8080
  330.  
  331. Added:
  332. 173.79.107.84:80
  333. 24.249.73.48:80
  334. 70.180.35.211:80
  335. 88.249.120.205:80
  336. 91.205.215.66:443
  337. 211.63.71.72:8080
  338. 46.105.131.69:443
  339. 105.27.155.182:80
  340. 24.164.79.147:8080
  341. 120.150.246.241:80
  342. 162.255.112.157:443
  343. 163.139.237.65:80
  344. 70.127.155.33:80
  345. 87.106.136.232:8080
  346. 185.94.252.104:443
  347. 24.204.47.87:80
  348. 139.130.241.252:443
  349. 74.108.124.180:80
  350. 104.131.11.150:443
  351. ```
  352. #### Current Epoch 2 RSA Public Key ####
  353. ```
  354. MHwwDQYJKoZIhvcNAQEBBQADawAwaAJhANQOcBKvh5xEW7VcJ9totsjdBwuAclxS
  355. Q0e09fk8V053lktpW3TRrzAW63yt6j1KWnyxMrU3igFXypBoI4lVNmkje4UPtIIS
  356. fkzjEIvG1v/ZNn1k0J0PfFTxbFFeUEs3AwIDAQAB
  357. ```
  358. #### Epoch 3 C2s ####
  359. ```
  360. 102.182.229.224:80
  361. 182.54.220.249:443
  362. 216.75.37.196:4143
  363. 124.150.175.133:443
  364. 181.39.96.86:443
  365. 73.32.177.21:80
  366. 103.61.109.13:80
  367. 154.73.137.131:80
  368. 144.76.56.36:8080
  369. 181.143.101.18:8080
  370. 41.185.29.128:8080
  371. 105.209.235.113:8080
  372. 185.63.32.149:80
  373. 184.162.115.11:443
  374. 58.93.151.148:80
  375. 211.20.154.102:80
  376. 75.127.14.170:8080
  377. 183.131.156.10:7080
  378. 24.249.63.138:80
  379. 82.145.43.153:8080
  380. 37.211.90.253:80
  381. 210.213.85.43:8080
  382. 94.182.203.158:80
  383. 125.99.17.181:80
  384. 78.188.170.128:80
  385. 91.117.131.122:80
  386. 82.165.15.188:8080
  387. 98.178.241.106:80
  388. 91.83.93.103:443
  389. 153.137.36.142:80
  390. 14.190.157.56:80
  391. 80.211.32.88:8080
  392. 61.195.228.54:80
  393. 70.45.30.28:80
  394. 217.12.70.226:80
  395. 220.128.125.18:80
  396. 88.247.53.159:443
  397. 177.144.130.105:443
  398. 88.250.201.40:443
  399. 41.77.74.214:80
  400. 81.215.14.128:80
  401. 121.81.185.175:80
  402. 95.66.182.136:80
  403. 157.7.164.178:8081
  404. 77.74.78.80:443
  405. 201.184.43.107:80
  406. 51.38.134.203:8080
  407. 85.100.115.92:80
  408. 89.249.222.142:80
  409. 212.112.113.235:80
  410. 82.39.42.86:80
  411. 175.181.7.188:80
  412. 42.51.192.231:8080
  413. 203.153.216.178:7080
  414. 50.63.13.135:8080
  415. 72.10.33.195:8080
  416. 192.163.221.191:8080
  417. 186.147.245.204:80
  418. 37.46.129.215:8080
  419. 109.236.109.159:8080
  420. 78.186.174.210:80
  421. 78.189.165.52:8080
  422. 122.176.116.57:443
  423. 188.251.213.180:443
  424. 78.188.44.18:443
  425. 183.82.123.60:443
  426. 186.84.173.136:8080
  427. 186.223.86.136:443
  428. 203.124.57.50:80
  429. 81.214.142.115:80
  430. 172.104.70.207:8080
  431. 178.33.167.120:8080
  432. 163.172.107.70:8080
  433. 142.93.87.198:8080
  434. 181.113.229.139:443
  435. 160.119.153.20:80
  436. 46.32.229.152:8080
  437. 195.201.56.70:8080
  438. 51.77.113.97:8080
  439. 158.69.167.246:8080
  440. 190.17.94.108:443
  441. 95.9.95.101:80
  442. 190.164.206.121:80
  443. 152.32.78.6:80
  444. 190.240.194.77:80
  445. 183.87.40.21:8080
  446. 186.10.92.114:80
  447. 190.63.7.166:8080
  448. 181.196.27.123:80
  449. 144.139.91.187:443
  450. 124.110.255.7:80
  451. 198.57.217.170:8080
  452. 89.215.225.15:80
  453. 122.160.18.54:80
  454. 50.116.78.109:8080
  455. 182.176.116.139:995
  456. 113.193.29.98:80
  457. 181.225.24.251:80
  458. 190.5.162.204:80
  459. 88.248.140.80:80
  460. 185.142.236.163:443
  461. 110.37.226.196:80
  462. 104.238.80.237:8080
  463. 60.130.173.117:80
  464. 113.160.88.86:443
  465. 117.2.133.44:443
  466. 192.210.217.94:8080
  467. 182.71.222.187:80
  468. 61.204.119.188:80
  469. 185.135.109.128:443
  470. 14.141.203.150:80
  471. 59.120.228.67:80
  472. 37.208.106.146:8080
  473. 122.116.104.238:7080
  474. 139.59.12.63:8080
  475. 182.184.29.137:8080
  476. 94.206.82.254:443
  477. 5.32.84.54:80
  478. 198.211.121.27:8080
  479. 187.72.47.161:443
  480. 82.146.55.23:7080
  481. 83.165.112.217:8080
  482. 201.183.251.100:80
  483. 162.144.46.90:8080
  484. 190.171.153.139:80
  485. 192.241.220.183:8080
  486. 110.142.161.90:80
  487. ```
  488. ### Epoch 3 C2 Changes ###
  489. ```
  490. Dropped:
  491. 61.231.97.26:80
  492. 177.103.240.93:80
  493. 45.55.179.121:8080
  494. 78.189.60.109:443
  495. 203.153.216.182:7080
  496. 68.183.18.169:8080
  497. 103.77.100.32:80
  498. 14.161.30.33:443
  499. 95.130.37.244:443
  500. 198.58.119.85:8080
  501. 95.6.84.189:80
  502. 116.90.230.98:443
  503. 178.62.75.204:8080
  504. 88.225.230.33:80
  505. 41.215.79.182:80
  506.  
  507. Added:
  508. 102.182.229.224:80
  509. 182.54.220.249:443
  510. 153.137.36.142:80
  511. 14.190.157.56:80
  512. 121.81.185.175:80
  513. 78.186.174.210:80
  514. 122.176.116.57:443
  515. 78.188.44.18:443
  516. 81.214.142.115:80
  517. 163.172.107.70:8080
  518. 124.110.255.7:80
  519. 122.160.18.54:80
  520. 50.116.78.109:8080
  521. 190.5.162.204:80
  522. 59.120.228.67:80
  523. ```
  524. #### Current Epoch 3 RSA Public Key ####
  525. ```
  526. MHwwDQYJKoZIhvcNAQEBBQADawAwaAJhAM/TXLLvX91I6dVMYe+T1PPO6mpcg7OJ
  527. cMl9o/g4nUhZOp8fAAmQl8XMXeGvDhZXTyX1AXf401iPFui0RB6glhl/7/djvi7j
  528. l32lAhyBANpKGty8xf3J5kGwwClnG/CXHQIDAQAB
  529. ```
  530. #### Sandbox ####
  531. ```
  532.  
  533. E1
  534. https://capesandbox.com/analysis/13016/
  535.  
  536. E2
  537. https://capesandbox.com/analysis/13017/
  538.  
  539. E3
  540. https://capesandbox.com/analysis/13018/
  541.  
  542. ```
  543.  
  544. -@Cryptolaemus1 Team
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement