emotet

General

Target

be3be1dba4703a8d3d54a2db7d79a20ebe2b8956bd660a035fdeee87b1156ae3
Size

368KB
Sample

210509-5ft4ev8rs6
MD5

a1db88dad2e41285cfc785919b6ac861
SHA1

f72154d5a87dcf9e9fbb6481ed60bc853b3e47eb
SHA256

be3be1dba4703a8d3d54a2db7d79a20ebe2b8956bd660a035fdeee87b1156ae3
SHA512

13f87a57d7cd6205e52b5ed4472b217b1d92d3588aada9aa7183134929a85ec76f688eb079687e1c8a68f1aeccc88f7695fa6d2a05a6a341bd349605e18015eb

Score

10^/10

Malware Config

Extracted

Family

emotet

Botnet

Epoch2

C2

149.135.10.19:80

91.231.166.124:8080

104.236.28.47:8080

46.105.131.87:80

100.6.23.40:80

200.41.121.90:80

66.34.201.20:7080

78.186.5.109:443

107.184.91.187:80

182.71.222.187:80

41.169.20.147:80

200.7.243.109:443

84.9.167.76:80

189.168.169.129:80

80.102.134.174:8080

60.250.78.22:443

24.196.13.216:80

75.133.26.185:80

37.139.21.175:8080

37.187.72.193:8080

rsa_pubkey.plain

Targets

- Target
  
  be3be1dba4703a8d3d54a2db7d79a20ebe2b8956bd660a035fdeee87b1156ae3
- Size
  
  368KB
- MD5
  
  a1db88dad2e41285cfc785919b6ac861
- SHA1
  
  f72154d5a87dcf9e9fbb6481ed60bc853b3e47eb
- SHA256
  
  be3be1dba4703a8d3d54a2db7d79a20ebe2b8956bd660a035fdeee87b1156ae3
- SHA512
  
  13f87a57d7cd6205e52b5ed4472b217b1d92d3588aada9aa7183134929a85ec76f688eb079687e1c8a68f1aeccc88f7695fa6d2a05a6a341bd349605e18015eb
Score

10^/10

emotet epoch2 banker trojan
- Emotet
  Emotet is a trojan that is primarily spread through spam emails.
  trojan banker emotet
behavioral1 behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

1

T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks

Sharing

General

Malware Config

Extracted

Targets

MITRE ATT&CK Matrix ATT&CK v6

Tasks

static1

behavioral1

behavioral2