emotet

General

Target

emotet_exe_e1_0c2b023dbeafcc69d17ddabc6ef85a1993eaad8aaaddd0c5115bc20b53d71423_2020-11-17__174501._exe
Size

242KB
Sample

201117-24r3r6ap82
MD5

b9a3e39cf9dc921793a42000678050f7
SHA1

5163e3c199bf9a064ab01b671dde497cd4902367
SHA256

0c2b023dbeafcc69d17ddabc6ef85a1993eaad8aaaddd0c5115bc20b53d71423
SHA512

b6715633530aaf9e9f18322220c4f35901c7f030226af5f9843e37a51fa0f1abd45d79589d1bedd90756fb3bfa06ec8a6c48aca9d08015b2c2057e2e20f8f1d6

Score

10^/10

Malware Config

Extracted

Family

emotet

Botnet

Epoch1

C2

202.22.141.45:80

37.187.161.206:8080

202.29.239.162:443

80.87.201.221:7080

82.76.111.249:443

216.47.196.104:80

192.241.143.52:8080

192.81.38.31:80

87.106.253.248:8080

64.201.88.132:80

192.241.146.84:8080

12.162.84.2:8080

1.226.84.243:8080

177.129.17.170:443

202.134.4.210:7080

70.169.17.134:80

152.169.22.67:80

5.196.35.138:7080

138.97.60.141:7080

203.205.28.68:80

rsa_pubkey.plain

Targets

- Target
  
  emotet_exe_e1_0c2b023dbeafcc69d17ddabc6ef85a1993eaad8aaaddd0c5115bc20b53d71423_2020-11-17__174501._exe
- Size
  
  242KB
- MD5
  
  b9a3e39cf9dc921793a42000678050f7
- SHA1
  
  5163e3c199bf9a064ab01b671dde497cd4902367
- SHA256
  
  0c2b023dbeafcc69d17ddabc6ef85a1993eaad8aaaddd0c5115bc20b53d71423
- SHA512
  
  b6715633530aaf9e9f18322220c4f35901c7f030226af5f9843e37a51fa0f1abd45d79589d1bedd90756fb3bfa06ec8a6c48aca9d08015b2c2057e2e20f8f1d6
Score

10^/10

emotet epoch1 banker trojan
- Emotet
  Emotet is a trojan that is primarily spread through spam emails.
  trojan banker emotet
- Emotet Payload
  Detects Emotet payload in memory.
behavioral1

MITRE ATT&CK Matrix

Tasks

static1

Score

N/A

behavioral1

emotetepoch1bankertrojan

Score

10^/10

Sharing

General

Malware Config

Extracted

Targets

Emotet Payload

MITRE ATT&CK Matrix

Tasks

static1

behavioral1