Overview

overview

10

Static

static

emotet_exe...xe.exe

windows7_x64

10

emotet_exe...xe.exe

windows10_x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    emotet_exe_e3_d687fb8028634be142a4f76b9e134be6d8d7f4e3dd75cc9f8c4e86bb4fd1ac85_2020-10-15__223200._exe
  • Size 875KB
  • Sample201015-bkj231t2hs
  • SHA256 d687fb8028634be142a4f76b9e134be6d8d7f4e3dd75cc9f8c4e86bb4fd1ac85
  • MD5 SHA1 SHA512
Score
10/10
emotetepoch3bankertrojan

Malware Config

Extracted

Family

  • emotet

Botnet

  • Epoch3

C2

  • 73.100.19.104:80

  • 103.3.63.137:8080

  • 188.166.220.180:7080

  • 192.175.111.217:7080

  • 91.83.93.103:443

  • 94.212.52.40:80

  • 190.191.171.72:80

  • 24.231.51.190:80

  • 113.161.148.81:80

  • 46.105.131.68:8080

  • 223.17.215.76:80

  • 45.239.204.100:80

  • 185.80.172.199:80

  • 91.75.75.46:80

  • 190.151.5.131:443

  • 60.125.114.64:443

  • 77.74.78.80:443

  • 175.103.38.146:80

  • 58.27.215.3:8080

  • 91.213.106.100:8080

rsa_pubkey.plain

Targets

    • Target
      emotet_exe_e3_d687fb8028634be142a4f76b9e134be6d8d7f4e3dd75cc9f8c4e86bb4fd1ac85_2020-10-15__223200._exe
    • Size 875KB
    • SHA256 d687fb8028634be142a4f76b9e134be6d8d7f4e3dd75cc9f8c4e86bb4fd1ac85
    • MD5 SHA1 SHA512
    Score
    10/10
    trojanbankeremotet

    • Emotet

      Emotet is a trojan that is primarily spread through spam emails.

      trojanbankeremotet

    • Emotet Payload

      Detects Emotet payload in memory.

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks