Overview

overview

10

Static

static

emotet_exe...xe.exe

windows7_x64

10

emotet_exe...xe.exe

windows10_x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    emotet_exe_e3_6fdfa70cd78d0c7f9b9d9129ea931651a2a98b423180cd280b277117ea937afc_2020-08-21__074553._exe
  • Size 200KB
  • Sample200821-c5gn19v1da
  • SHA256 6fdfa70cd78d0c7f9b9d9129ea931651a2a98b423180cd280b277117ea937afc
  • MD5 SHA1 SHA512
Score
10/10
emotetepoch3bankertrojan

Malware Config

Extracted

Family

  • emotet

Botnet

  • Epoch3

C2

  • 173.94.215.84:80

  • 85.25.207.108:8080

  • 178.128.14.92:8080

  • 60.125.114.64:443

  • 181.126.54.234:80

  • 157.7.164.178:8081

  • 95.216.205.155:8080

  • 216.75.37.196:8080

  • 179.62.238.49:80

  • 71.57.180.213:80

  • 172.96.190.154:8080

  • 112.78.142.170:80

  • 178.238.232.46:443

  • 177.144.130.105:443

  • 105.209.235.113:8080

  • 46.105.131.68:8080

  • 185.86.148.68:443

  • 143.95.101.72:8080

  • 75.127.14.170:8080

  • 168.0.97.6:80

rsa_pubkey.plain

Targets

    • Target
      emotet_exe_e3_6fdfa70cd78d0c7f9b9d9129ea931651a2a98b423180cd280b277117ea937afc_2020-08-21__074553._exe
    • Size 200KB
    • SHA256 6fdfa70cd78d0c7f9b9d9129ea931651a2a98b423180cd280b277117ea937afc
    • MD5 SHA1 SHA512
    Score
    10/10
    trojanbankeremotet

    • Emotet

      Emotet is a trojan that is primarily spread through spam emails.

      trojanbankeremotet

    • Emotet Payload

      Detects Emotet payload in memory.

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks