Overview

overview

10

Static

static

2FOI.exe

windows7_x64

10

2FOI.exe

windows10_x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    2FOI.exe
  • Size 428KB
  • Sample200730-mlj77wltta
  • SHA256 02530b5b6aaf5581cf3aeb625fa6d8517cdb2d09fa7ee9fd60e2d416f2ec2ec7
  • MD5 SHA1 SHA512
Score
10/10
emotetepoch2bankertrojan

Malware Config

Extracted

Family

  • emotet

Botnet

  • Epoch2

C2

  • 47.146.117.214:80

  • 62.108.54.22:8080

  • 212.51.142.238:8080

  • 190.160.53.126:80

  • 87.106.136.232:8080

  • 74.208.45.104:8080

  • 121.124.124.40:7080

  • 124.45.106.173:443

  • 76.27.179.47:80

  • 210.165.156.91:80

  • 61.19.246.238:443

  • 81.2.235.111:8080

  • 169.239.182.217:8080

  • 181.230.116.163:80

  • 139.130.242.43:80

  • 46.105.131.87:80

  • 139.59.60.244:8080

  • 222.214.218.37:4143

  • 41.60.200.34:80

  • 200.55.243.138:8080

rsa_pubkey.plain

Targets

    • Target
      2FOI.exe
    • Size 428KB
    • SHA256 02530b5b6aaf5581cf3aeb625fa6d8517cdb2d09fa7ee9fd60e2d416f2ec2ec7
    • MD5 SHA1 SHA512
    Score
    10/10
    trojanbankeremotet

    • Emotet

      Emotet is a trojan that is primarily spread through spam emails.

      trojanbankeremotet

    • Emotet Payload

      Detects Emotet payload in memory.

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks