emotet

General

Target

emotet_exe_e1_4b91092e60ce4a32502fcb9489722108d033beac779e5f229743a666c05d3041_2020-11-19__145146._exe
Size

432KB
Sample

201119-x55kh54nfs
MD5

99741f11d5f67e1305b317cb51ae315f
SHA1

df40f59684f1b440e6c955c5a59ae159e421c4f7
SHA256

ff63368c331815393e5743a7ddc828adcba51a3dbfca0b51e81c66bc615d3d5c
SHA512

e4918668400b66ca90d2374d48ec8f1cdd802861595479f4f578adaf8433889016123dcc5d1bfc8ec6cd8bced44c1c050eae570b6b3d4005cd9bbcf7f5408252

Score

10^/10

Malware Config

Extracted

Family

emotet

Botnet

Epoch1

C2

181.30.61.163:443

209.126.6.222:8080

5.153.250.14:8080

188.135.15.49:80

104.131.41.185:8080

178.250.54.208:8080

50.28.51.143:8080

170.81.48.2:80

87.106.46.107:8080

191.99.160.58:80

187.162.248.237:80

89.32.150.160:8080

46.28.111.142:7080

190.190.148.27:8080

190.115.18.139:8080

178.79.163.131:8080

73.213.208.163:80

219.92.8.17:8080

95.9.180.128:80

212.71.237.140:8080

rsa_pubkey.plain

Targets

- Target
  
  emotet_exe_e1_4b91092e60ce4a32502fcb9489722108d033beac779e5f229743a666c05d3041_2020-11-19__145146._exe
- Size
  
  432KB
- MD5
  
  99741f11d5f67e1305b317cb51ae315f
- SHA1
  
  df40f59684f1b440e6c955c5a59ae159e421c4f7
- SHA256
  
  ff63368c331815393e5743a7ddc828adcba51a3dbfca0b51e81c66bc615d3d5c
- SHA512
  
  e4918668400b66ca90d2374d48ec8f1cdd802861595479f4f578adaf8433889016123dcc5d1bfc8ec6cd8bced44c1c050eae570b6b3d4005cd9bbcf7f5408252
Score

10^/10

emotet epoch1 banker trojan
- Emotet
  Emotet is a trojan that is primarily spread through spam emails.
  trojan banker emotet
- Emotet Payload
  Detects Emotet payload in memory.
behavioral1

MITRE ATT&CK Matrix

Tasks

static1

Score

N/A

behavioral1

emotetepoch1bankertrojan

Score

10^/10

Sharing

General

Malware Config

Extracted

Targets

Emotet Payload

MITRE ATT&CK Matrix

Tasks

static1

behavioral1