Emotet 25/09/2018

#Emotet 25/09/2018
372 URL's
 30 Doc
  4 Payload
 68 C2

[+] 26 New C2

Doc
				MD5								 Create Date
	03ebf7b00388056f66b2d67c6a4e3937        2018:08:01 15:10:00
	092b35534dc5573c7faa730d6297cdbd        2018:09:05 11:29:00
	096f69c7f1f6863e5349c60037b5e170        2018:09:25 15:41:00
	1b54aa8ff67323bd01dc40f98ffcee05        2018:09:25 19:24:00
	2444e884d6da44cb4269e48d1e6b56ca        2018:09:24 10:51:00
	31c07202e164a19a075ea012569f0173        2018:09:25 22:07:00
	31fd99548accf7e4dcdfadf815f898ac        2018:07:20 18:49:00
	37d45d11a751092bbebd1034bee7ccc6        2018:09:12 11:14:00
	3f1ed313b274efad0de486770093a7a9        2018:09:25 19:24:00
	44ed5d417fa596a196d1aa66610fff83        2018:07:12 07:09:00
	472741324ca1f04717a78f0583e2f5f2        2018:09:25 15:41:00
	5ccacd20eb79687301cbfa6e09c36766        2018:09:07 07:47:00
	6433b1e107b2062ec7df9fc07bf4b6ef        2018:09:25 15:41:00
	64382896bf9d5e9597c336a42fe5c911        2018:08:17 13:07:00
	6737171cb822faaa0c6d5c3aea12c3dd        2018:09:19 17:45:00
	70600ba04013b22b3783c61542344981        2018:06:13 10:46:00
	70905778c2700556e85887246ffdcbe7        2018:09:06 21:45:00
	77fa28e31ec25d1d8d1e639018d9b52f        2018:08:31 18:35:00
	8db32eab99c56ec395fac39cf5b48fd3        2018:09:25 19:24:00
	90965fcfaf3838c728ecaf1f0dc4ada7        2018:09:25 22:07:00
	9ed57b713ef8fbf09f164e1dff08ec3b        2018:09:19 10:56:00
	a348d4b74c344ff1b41b320ad6accf9e        2018:07:13 20:54:00
	a774d6487dc1a0649813a124beffebdd        2018:08:24 13:57:00
	b1f91eae3adf10a333e9fd7dea33738c        2018:09:25 19:24:00
	c90b8a04dfc59fc2ec3962d727e75168        2018:09:25 13:07:00
	cd6416c8613c031032d6c14063538203        2018:06:22 21:41:00
	d20d00fbfc1d1b0e77e00804c15bb812        2018:09:25 13:07:00
	ecf475aea6d373c61244f4db7d2ee595        2018:09:21 18:53:00
	f41b08ccf950ad4b2e52d0c9e6006c2f        2018:08:31 15:08:00
	fc5768835630adac43e569ef2808ecb7        2018:09:24 21:52:00

Payload
				MD5								 Create Date
	39b708e196d7b1902aaa2dce74b402fe        2018:09:25 17:16:41
	7417a7c8832cd5af24758c2a2b93edca        2018:09:25 22:17:01
	90b45b764a3fda2bef831e704ef6cb39        2018:09:26 01:46:37
	c50de84047c15476a5cef6fe86176aea        2018:09:25 22:45:15

Metadata
	+----------------------------------+----------------+------------------+-------------------------------------+------------------+--------------+----------------------------+--------------------+--------------+-----------------+
	|               MD5                |  Company Name  | File Description |            Company Name             | File Description | File Version |       Internal Name        | Original File Name | Product Name | Product Version |
	+----------------------------------+----------------+------------------+-------------------------------------+------------------+--------------+----------------------------+--------------------+--------------+-----------------+
	| 39b708e196d7b1902aaa2dce74b402fe | 6.1.7600.16385 |   6.1.7600.16385 | 6.1.7600.16385 (win7_rtm.090713-125 | PID              | PID          | Microsoft® Windows® Operat |       6.1.7600.163 |              |                 |
	| 7417a7c8832cd5af24758c2a2b93edca | 6.1.7600.16385 |   6.1.7600.16385 | 6.1.7600.16385 (win7_rtm.090713-125 | PID              | PID          | Microsoft® Windows® Operat |       6.1.7600.163 |              |                 |
	| 90b45b764a3fda2bef831e704ef6cb39 | 6.1.7600.16385 |   6.1.7600.16385 | 6.1.7600.16385 (win7_rtm.090713-125 | PID              | PID          | Microsoft® Windows® Operat |       6.1.7600.163 |              |                 |
	| c50de84047c15476a5cef6fe86176aea | 6.1.7600.16385 |   6.1.7600.16385 | 6.1.7600.16385 (win7_rtm.090713-125 | PID              | PID          | Microsoft® Windows® Operat |       6.1.7600.163 |              |                 |
	+----------------------------------+----------------+------------------+-------------------------------------+------------------+--------------+----------------------------+--------------------+--------------+-----------------+

C2
	39b708e196d7b1902aaa2dce74b402fe
		190.147.53.140:8090
		186.68.141.218:80
		201.132.185.66:80
		69.203.214.97:8080
		187.195.13.245:7080
		181.56.163.152:80
		201.244.125.210:53
		89.120.94.134:80
		187.176.67.240:443
		189.252.25.74:8080
		74.208.163.52:8080
		37.120.175.15:80
		133.242.208.183:8080
		189.210.142.250:443
		190.110.217.70:80
		203.198.129.4:8080
		217.13.106.203:4143
		69.70.248.98:8443
		49.212.135.76:443
		69.198.17.20:8080
		139.59.242.76:8080
		71.45.208.246:8080
		96.23.80.242:50000
		200.6.168.98:8080
		139.162.237.94:7080
		31.186.54.47:80
		183.82.101.39:80
		95.6.64.119:8080
		198.199.185.25:443
		220.253.68.95:8080
		210.2.86.94:8080

    7417a7c8832cd5af24758c2a2b93edca
		74.195.12.152:8443
		184.58.93.250:80
		187.189.233.31:8080
		88.250.118.73:7080
		142.59.219.59:80
		207.255.226.104:50000
		187.250.199.185:8443
		86.142.26.130:50000
		79.79.52.182:21
		54.37.77.86:8080
		81.7.10.106:7080
		78.47.182.42:8080
		175.136.149.221:8080
		108.166.150.58:80
		153.122.38.158:443
		217.174.206.181:443
		69.198.17.7:8080
		24.116.195.92:8080
		124.13.204.89:80
		159.69.2.128:7080
		97.87.198.18:8090
		210.215.155.44:443
		187.189.144.131:443
		211.115.111.19:443
		84.200.106.120:8080
		222.214.218.192:4143
		199.119.78.9:443
		95.141.175.240:443
		139.193.177.165:8090
		178.254.33.30:443
		106.187.52.135:443
		118.244.214.210:443
		216.215.112.198:80
		98.10.198.137:80
		146.185.170.222:8080
		199.119.78.23:443

    90b45b764a3fda2bef831e704ef6cb39
		190.147.53.140:8090
		186.68.141.218:80
		201.132.185.66:80
		69.203.214.97:8080
		187.195.13.245:7080
		181.56.163.152:80
		201.244.125.210:53
		89.120.94.134:80
		187.176.67.240:443
		189.252.25.74:8080
		74.208.163.52:8080
		37.120.175.15:80
		133.242.208.183:8080
		189.210.142.250:443
		190.110.217.70:80
		203.198.129.4:8080
		217.13.106.203:4143
		69.70.248.98:8443
		49.212.135.76:443
		69.198.17.20:8080
		139.59.242.76:8080
		71.45.208.246:8080
		96.23.80.242:50000
		200.6.168.98:8080
		139.162.237.94:7080
		31.186.54.47:80
		183.82.101.39:80
		95.6.64.119:8080
		198.199.185.25:443
		220.253.68.95:8080
		210.2.86.94:8080

    c50de84047c15476a5cef6fe86176aea
		190.147.53.140:8090
		186.68.141.218:80
		201.132.185.66:80
		69.203.214.97:8080
		187.195.13.245:7080
		181.56.163.152:80
		201.244.125.210:53
		89.120.94.134:80
		187.176.67.240:443
		189.252.25.74:8080
		74.208.163.52:8080
		37.120.175.15:80
		133.242.208.183:8080
		189.210.142.250:443
		190.110.217.70:80
		203.198.129.4:8080
		217.13.106.203:4143
		69.70.248.98:8443
		49.212.135.76:443
		69.198.17.20:8080
		139.59.242.76:8080
		71.45.208.246:8080
		96.23.80.242:50000
		200.6.168.98:8080
		139.162.237.94:7080
		31.186.54.47:80
		183.82.101.39:80
		95.6.64.119:8080
		198.199.185.25:443
		220.253.68.95:8080
		210.2.86.94:8080

C2 By Port
	C2						Port
	79.79.52.182			21
	201.244.125.210			53
	108.166.150.58			80
	124.13.204.89			80
	142.59.219.59			80
	181.56.163.152			80
	183.82.101.39			80
	184.58.93.250			80
	186.68.141.218			80
	190.110.217.70			80
	201.132.185.66			80
	216.215.112.198			80
	31.186.54.47			80
	37.120.175.15			80
	89.120.94.134			80
	98.10.198.137			80
	106.187.52.135			443
	118.244.214.210			443
	153.122.38.158			443
	178.254.33.30			443
	187.176.67.240			443
	187.189.144.131			443
	189.210.142.250			443
	198.199.185.25			443
	199.119.78.23			443
	199.119.78.9			443
	210.215.155.44			443
	211.115.111.19			443
	217.174.206.181			443
	49.212.135.76			443
	95.141.175.240			443
	217.13.106.203			4143
	222.214.218.192			4143
	139.162.237.94			7080
	159.69.2.128			7080
	187.195.13.245			7080
	81.7.10.106				7080
	88.250.118.73			7080
	133.242.208.183			8080
	139.59.242.76			8080
	146.185.170.222			8080
	175.136.149.221			8080
	187.189.233.31			8080
	189.252.25.74			8080
	200.6.168.98			8080
	203.198.129.4			8080
	210.2.86.94				8080
	220.253.68.95			8080
	24.116.195.92			8080
	54.37.77.86				8080
	69.198.17.20			8080
	69.198.17.7				8080
	69.203.214.97			8080
	71.45.208.246			8080
	74.208.163.52			8080
	78.47.182.42			8080
	84.200.106.120			8080
	95.6.64.119				8080
	139.193.177.165			8090
	190.147.53.140			8090
	97.87.198.18			8090
	187.250.199.185			8443
	69.70.248.98			8443
	74.195.12.152			8443
	207.255.226.104			50000
	86.142.26.130			50000
	96.23.80.242			50000


NEW C2
	C2						Port
	79.79.52.182			21
	124.13.204.89			80
	142.59.219.59			80
	181.56.163.152			80
	184.58.93.250			80
	186.68.141.218			80
	201.132.185.66			80
	31.186.54.47			80
	89.120.94.134			80
	98.10.198.137			80
	178.254.33.30			443
	187.189.144.131			443
	187.195.13.245			7080
	81.7.10.106				7080
	88.250.118.73			7080
	187.189.233.31			8080
	200.6.168.98			8080
	69.198.17.20			8080
	69.203.214.97			8080
	74.208.163.52			8080
	139.193.177.165			8090
	190.147.53.140			8090
	187.250.199.185			8443
	74.195.12.152			8443
	207.255.226.104			50000
	86.142.26.130			50000