emotet

General

Target

emotet_exe_e1_3f93bcf46bf8a69c35a2c2ddf5a37570e136399f8c50a8dd9a075629da020702_2020-11-17__174502._exe
Size

505KB
Sample

201117-zv6lj5zb9e
MD5

9b6df3c5366953620f56a85cd111e0d7
SHA1

0a02a3b0c0c1c088f1a61729dd0f8fa9111d45c0
SHA256

3f93bcf46bf8a69c35a2c2ddf5a37570e136399f8c50a8dd9a075629da020702
SHA512

5f5244d57d35be092d5aedbace3d52ea459cb3f58c68cc8a7a68b5b89bb0d3fcd1718b1948d59f727f5f3804961dcce2b2a0cefc7a958a1d6a5c95d9937cfa1a

Score

10^/10

Malware Config

Extracted

Family

emotet

Botnet

Epoch1

C2

12.163.208.58:80

45.33.35.74:8080

87.106.253.248:8080

192.241.146.84:8080

190.115.18.139:8080

65.36.62.20:80

170.81.48.2:80

83.169.21.32:7080

185.232.182.218:80

190.2.31.172:80

77.106.157.34:8080

82.230.1.24:80

202.4.58.197:80

201.213.177.139:80

78.249.119.122:80

123.51.47.18:80

77.90.136.129:8080

60.93.23.51:80

152.169.22.67:80

190.117.79.209:80

rsa_pubkey.plain

Targets

- Target
  
  emotet_exe_e1_3f93bcf46bf8a69c35a2c2ddf5a37570e136399f8c50a8dd9a075629da020702_2020-11-17__174502._exe
- Size
  
  505KB
- MD5
  
  9b6df3c5366953620f56a85cd111e0d7
- SHA1
  
  0a02a3b0c0c1c088f1a61729dd0f8fa9111d45c0
- SHA256
  
  3f93bcf46bf8a69c35a2c2ddf5a37570e136399f8c50a8dd9a075629da020702
- SHA512
  
  5f5244d57d35be092d5aedbace3d52ea459cb3f58c68cc8a7a68b5b89bb0d3fcd1718b1948d59f727f5f3804961dcce2b2a0cefc7a958a1d6a5c95d9937cfa1a
Score

10^/10

emotet epoch1 banker trojan
- Emotet
  Emotet is a trojan that is primarily spread through spam emails.
  trojan banker emotet
- Emotet Payload
  Detects Emotet payload in memory.
behavioral1

MITRE ATT&CK Matrix

Tasks

static1

Score

N/A

behavioral1

emotetepoch1bankertrojan

Score

10^/10

Sharing

General

Malware Config

Extracted

Targets

Emotet Payload

MITRE ATT&CK Matrix

Tasks

static1

behavioral1