Overview

overview

10

Static

static

emotet_exe...xe.exe

windows7_x64

10

emotet_exe...xe.exe

windows10_x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    emotet_exe_e3_7556a762283e992435f3b174f8c6eb74d7a1c697fa3ff9e9f8834bb2f8a58db5_2020-09-14__125833._exe
  • Size 640KB
  • Sample200914-p3mdm7bbw2
  • SHA256 7556a762283e992435f3b174f8c6eb74d7a1c697fa3ff9e9f8834bb2f8a58db5
  • MD5 SHA1 SHA512
Score
10/10
emotetepoch3bankertrojan

Malware Config

Extracted

Family

  • emotet

Botnet

  • Epoch3

C2

  • 202.153.220.157:80

  • 190.85.46.52:7080

  • 85.25.208.71:8081

  • 162.144.42.60:8080

  • 37.187.100.220:7080

  • 74.208.173.91:8080

  • 116.202.10.123:8080

  • 157.245.138.101:7080

  • 46.32.229.152:8080

  • 192.241.220.183:8080

  • 117.247.235.44:80

  • 128.106.187.110:80

  • 182.253.83.234:7080

  • 178.33.167.120:8080

  • 37.205.9.252:7080

  • 179.5.118.12:80

  • 80.200.62.81:20

  • 37.210.220.95:80

  • 45.177.120.37:8080

  • 113.193.239.51:443

rsa_pubkey.plain

Targets

    • Target
      emotet_exe_e3_7556a762283e992435f3b174f8c6eb74d7a1c697fa3ff9e9f8834bb2f8a58db5_2020-09-14__125833._exe
    • Size 640KB
    • SHA256 7556a762283e992435f3b174f8c6eb74d7a1c697fa3ff9e9f8834bb2f8a58db5
    • MD5 SHA1 SHA512
    Score
    10/10
    trojanbankeremotet

    • Emotet

      Emotet is a trojan that is primarily spread through spam emails.

      trojanbankeremotet
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks