emotet

General

Target

bad5cbb6a8fd02ddaecb6a0df92f0af26752c8887ecf4a2eec02846c7a7bc472
Size

392KB
Sample

200801-gvl7kprbje
MD5

5a0024c36c0658f14b011fb6c450f64b
SHA1

9c86965dcce131930afa96aa6a3178b30eb59566
SHA256

bad5cbb6a8fd02ddaecb6a0df92f0af26752c8887ecf4a2eec02846c7a7bc472
SHA512

19f6fb7a898ed50f5f57f93b7e7296616916d9fbaf35fedcc77e308a9773949e4b6f5265b70341220eec50b6084d17a8c54abf55a27085f2a042fa53deb81f29

Score

10^/10

Malware Config

Extracted

Family

emotet

Botnet

Epoch2

C2

142.105.151.124:443

62.108.54.22:8080

212.51.142.238:8080

71.208.216.10:80

108.48.41.69:80

83.110.223.58:443

210.165.156.91:80

104.131.44.150:8080

104.236.246.93:8080

5.39.91.110:7080

209.141.54.221:8080

209.182.216.177:443

153.126.210.205:7080

91.211.88.52:7080

180.92.239.110:8080

183.101.175.193:80

162.241.92.219:8080

87.106.139.101:8080

114.146.222.200:80

65.111.120.223:80

rsa_pubkey.plain

Targets

- Target
  
  bad5cbb6a8fd02ddaecb6a0df92f0af26752c8887ecf4a2eec02846c7a7bc472
- Size
  
  392KB
- MD5
  
  5a0024c36c0658f14b011fb6c450f64b
- SHA1
  
  9c86965dcce131930afa96aa6a3178b30eb59566
- SHA256
  
  bad5cbb6a8fd02ddaecb6a0df92f0af26752c8887ecf4a2eec02846c7a7bc472
- SHA512
  
  19f6fb7a898ed50f5f57f93b7e7296616916d9fbaf35fedcc77e308a9773949e4b6f5265b70341220eec50b6084d17a8c54abf55a27085f2a042fa53deb81f29
Score

10^/10

trojan banker emotet
- Emotet
  Emotet is a trojan that is primarily spread through spam emails.
  trojan banker emotet
- Emotet Payload
  Detects Emotet payload in memory.
behavioral1

MITRE ATT&CK Matrix

Tasks

static1

Score

N/A

behavioral1

trojanbankeremotet

Score

10^/10

Sharing

General

Malware Config

Extracted

Targets

Emotet Payload

MITRE ATT&CK Matrix

Tasks

static1

behavioral1