Overview

overview

10

Static

static

emotet_exe...xe.exe

windows7_x64

10

emotet_exe...xe.exe

windows10_x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    emotet_exe_e3_f64eeff7468244c4ffe0d78ff509dadaa1fca725cb85386b470e8e7de26ea365_2020-08-12__000414._exe
  • Size 60KB
  • Sample200812-c2s53dezse
  • SHA256 f64eeff7468244c4ffe0d78ff509dadaa1fca725cb85386b470e8e7de26ea365
  • MD5 SHA1 SHA512
Score
10/10
emotetepoch3bankertrojan

Malware Config

Extracted

Family

  • emotet

Botnet

  • Epoch3

C2

  • 92.24.51.238:80

  • 139.99.157.213:8080

  • 188.166.25.84:8080

  • 81.214.253.80:443

  • 5.79.70.250:8080

  • 41.185.29.128:8080

  • 181.164.110.7:80

  • 177.37.81.212:443

  • 203.153.216.178:7080

  • 178.33.167.120:8080

  • 77.74.78.80:443

  • 37.70.131.107:80

  • 190.164.75.175:80

  • 75.127.14.170:8080

  • 78.188.170.128:80

  • 113.161.148.81:80

  • 105.209.235.113:8080

  • 177.144.130.105:443

  • 81.17.93.134:80

  • 181.134.9.162:80

rsa_pubkey.plain

Targets

    • Target
      emotet_exe_e3_f64eeff7468244c4ffe0d78ff509dadaa1fca725cb85386b470e8e7de26ea365_2020-08-12__000414._exe
    • Size 60KB
    • SHA256 f64eeff7468244c4ffe0d78ff509dadaa1fca725cb85386b470e8e7de26ea365
    • MD5 SHA1 SHA512
    Score
    10/10
    trojanbankeremotet

    • Emotet

      Emotet is a trojan that is primarily spread through spam emails.

      trojanbankeremotet

    • Emotet Payload

      Detects Emotet payload in memory.

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks