Overview

overview

10

Static

static

emotet_exe...xe.exe

windows7_x64

10

emotet_exe...xe.exe

windows10_x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    emotet_exe_e3_2549562d0744b356595bf9ce73030cf3d623cdd353ad2a02c0590c6f13aa596d_2020-10-15__000559._exe
  • Size 320KB
  • Sample201015-tw7jm8ecej
  • SHA256 2549562d0744b356595bf9ce73030cf3d623cdd353ad2a02c0590c6f13aa596d
  • MD5 SHA1 SHA512
Score
10/10
emotetepoch3bankertrojan

Malware Config

Extracted

Family

  • emotet

Botnet

  • Epoch3

C2

  • 125.200.20.233:80

  • 93.186.197.189:7080

  • 188.166.220.180:7080

  • 192.175.111.217:7080

  • 118.243.83.70:80

  • 103.80.51.61:8080

  • 185.80.172.199:80

  • 172.96.190.154:8080

  • 116.202.10.123:8080

  • 46.105.131.68:8080

  • 223.17.215.76:80

  • 192.210.217.94:8080

  • 190.194.12.132:80

  • 115.79.59.157:80

  • 190.191.171.72:80

  • 24.231.51.190:80

  • 203.153.216.178:7080

  • 175.103.38.146:80

  • 36.91.44.183:80

  • 213.165.178.214:80

rsa_pubkey.plain

Targets

    • Target
      emotet_exe_e3_2549562d0744b356595bf9ce73030cf3d623cdd353ad2a02c0590c6f13aa596d_2020-10-15__000559._exe
    • Size 320KB
    • SHA256 2549562d0744b356595bf9ce73030cf3d623cdd353ad2a02c0590c6f13aa596d
    • MD5 SHA1 SHA512
    Score
    10/10
    trojanbankeremotet

    • Emotet

      Emotet is a trojan that is primarily spread through spam emails.

      trojanbankeremotet

    • Emotet Payload

      Detects Emotet payload in memory.

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks