Rewterz Threat Alert – Emotet Epoch 3 botnet Deploys Trickbot and Qakbot - Rewterz
Tags
| attack-pattern: | Data Botnet - T1583.005 Botnet - T1584.005 Credentials - T1589.001 Financial Theft - T1657 Malware - T1587.001 Malware - T1588.001 |
Common Information
| Type | Value |
|---|---|
| UUID | 76508db6-e592-488a-884f-eb5bbd1f3dca |
| Fingerprint | 81b082712fd5dfdf |
| Analysis status | DONE |
| Considered CTI value | 2 |
| Text language | |
| Published | Aug. 28, 2020, 2:19 p.m. |
| Added to db | Dec. 19, 2024, 7:08 a.m. |
| Last updated | Dec. 19, 2024, 10:36 p.m. |
| Headline | Rewterz Threat Alert – Emotet Epoch 3 botnet Deploys Trickbot and Qakbot |
| Title | Rewterz Threat Alert – Emotet Epoch 3 botnet Deploys Trickbot and Qakbot - Rewterz |
| Detected Hints/Tags/Attributes | 22/1/34 |
Source URLs
URL Provider
Attributes
| Details | Type | #Events | CTI | Value |
|---|---|---|---|---|
| Details | Domain | 1 | king61tours.com |
|
| Details | Domain | 1 | grzegorzkucharski.com |
|
| Details | Domain | 1 | karaz-sd.com |
|
| Details | File | 10 | invoice.doc |
|
| Details | md5 | 1 | 80f08f9a481b39e6f6d33efdec834855 |
|
| Details | md5 | 1 | 8e514dc1be16b12953315b5b6889bc00 |
|
| Details | md5 | 1 | ca8f77c07e02b6065f745d0021396bf1 |
|
| Details | md5 | 1 | 08ee2019e928a4a090edb0e98d073272 |
|
| Details | sha1 | 1 | ca01e30acb99809ec08e9f02737e25084215b964 |
|
| Details | sha1 | 1 | 921a5af03f919c2ddf9d85e46a0307d75f394d9b |
|
| Details | sha1 | 1 | 4c59d3ee93aaaaa400adedde0798182dee855ee2 |
|
| Details | sha1 | 1 | 58963deab813763b36552447878c2fb5f9b96ce0 |
|
| Details | sha256 | 1 | 537cae9dc56e79decd19c95f3558a5f204bb70fe6fa16ac7ef840991803508ac |
|
| Details | sha256 | 1 | ab738270198457f6e7d98c31337280933b09dd563ea6b9bfb73716903a0a7f23 |
|
| Details | sha256 | 1 | 482f758d1a5ee81bf89cf7b582d80117520427064ce505246cca7733b4bbde67 |
|
| Details | sha256 | 1 | 9206615c27a64e4617f1e3ec11b5584e0510df8b5744581f9e9c5d0136b1e43f |
|
| Details | IPv4 | 1 | 194.5.249.157 |
|
| Details | IPv4 | 3 | 91.200.103.236 |
|
| Details | IPv4 | 1 | 195.123.240.252 |
|
| Details | IPv4 | 2 | 107.174.192.219 |
|
| Details | IPv4 | 1 | 185.176.40.216 |
|
| Details | IPv4 | 1 | 185.81.158.15 |
|
| Details | IPv4 | 1 | 82.239.200.118 |
|
| Details | IPv4 | 2 | 96.9.73.73 |
|
| Details | IPv4 | 2 | 180.211.170.214 |
|
| Details | IPv4 | 3 | 203.176.135.102 |
|
| Details | IPv4 | 1 | 195.123.241.187 |
|
| Details | IPv4 | 1 | 37.247.111.239 |
|
| Details | IPv4 | 7 | 104.236.52.89 |
|
| Details | Url | 1 | http://grzegorzkucharski.com/cli/92278618/fs8rc5s-001552 |
|
| Details | Url | 1 | http://203.176.135.102 |
|
| Details | Url | 1 | http://104.236.52.89 |
|
| Details | Url | 1 | http://king61tours.com/pdf/lwuqksrgijhxw |
|
| Details | Url | 1 | http://185.81.158.15 |