Overview

overview

10

Static

static

emotet_exe...xe.exe

windows7_x64

10

emotet_exe...xe.exe

windows10_x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    emotet_exe_e2_131c6872a0dee4fcbc2af256dc4251f7cee8cf6cf7ba26e6e8da0539da7006c5_2020-09-14__165050._exe
  • Size 624KB
  • Sample200914-gma6te2a8e
  • SHA256 131c6872a0dee4fcbc2af256dc4251f7cee8cf6cf7ba26e6e8da0539da7006c5
  • MD5 SHA1 SHA512
Score
10/10
emotetepoch2bankertrojan

Malware Config

Extracted

Family

  • emotet

Botnet

  • Epoch2

C2

  • 104.32.141.43:80

  • 104.156.59.7:8080

  • 120.138.30.150:8080

  • 139.59.67.118:443

  • 61.92.17.12:80

  • 103.86.49.11:8080

  • 174.45.13.118:80

  • 75.139.38.211:80

  • 104.131.11.150:443

  • 121.124.124.40:7080

  • 200.114.213.233:8080

  • 185.94.252.104:443

  • 181.169.34.190:80

  • 187.161.206.24:80

  • 93.147.212.206:80

  • 176.111.60.55:8080

  • 83.169.36.251:8080

  • 174.102.48.180:443

  • 24.179.13.119:80

  • 120.150.60.189:80

rsa_pubkey.plain

Targets

    • Target
      emotet_exe_e2_131c6872a0dee4fcbc2af256dc4251f7cee8cf6cf7ba26e6e8da0539da7006c5_2020-09-14__165050._exe
    • Size 624KB
    • SHA256 131c6872a0dee4fcbc2af256dc4251f7cee8cf6cf7ba26e6e8da0539da7006c5
    • MD5 SHA1 SHA512
    Score
    10/10
    trojanbankeremotet

    • Emotet

      Emotet is a trojan that is primarily spread through spam emails.

      trojanbankeremotet
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks