emotet

General

Target

a35345badf0d592e292e05b3107d4c602d05e212eca9a897b1282554e64c838b
Size

368KB
Sample

210511-vkwnezl9l2
MD5

b409c006b36650dbbc8c95f64cd62922
SHA1

c05d0f80916d8fa2061dfa37e56d398b4ba27b79
SHA256

a35345badf0d592e292e05b3107d4c602d05e212eca9a897b1282554e64c838b
SHA512

145bf0358628e010ead70a8df58a1e118ad4e87d76b32ffd13df6a9fecfd83799e3631ceb93e19b36cc35c219f6527cd55b48e49ba898455819be1e5f45ea639

Score

10^/10

Malware Config

Extracted

Family

emotet

Botnet

Epoch3

C2

118.167.155.233:80

110.37.226.196:443

178.33.167.120:8080

124.150.175.133:443

87.252.100.28:80

75.127.14.170:8080

190.247.9.40:443

181.225.24.251:80

45.55.179.121:8080

154.120.227.190:443

91.83.93.103:443

188.251.213.180:443

211.20.154.102:443

186.80.169.128:80

192.210.217.94:8080

58.93.151.148:80

178.62.75.204:8080

70.45.30.28:80

14.161.30.33:443

45.118.136.92:8080

rsa_pubkey.plain

Targets

- Target
  
  a35345badf0d592e292e05b3107d4c602d05e212eca9a897b1282554e64c838b
- Size
  
  368KB
- MD5
  
  b409c006b36650dbbc8c95f64cd62922
- SHA1
  
  c05d0f80916d8fa2061dfa37e56d398b4ba27b79
- SHA256
  
  a35345badf0d592e292e05b3107d4c602d05e212eca9a897b1282554e64c838b
- SHA512
  
  145bf0358628e010ead70a8df58a1e118ad4e87d76b32ffd13df6a9fecfd83799e3631ceb93e19b36cc35c219f6527cd55b48e49ba898455819be1e5f45ea639
Score

10^/10

emotet epoch3 banker trojan
- Emotet
  Emotet is a trojan that is primarily spread through spam emails.
  trojan banker emotet
behavioral1 behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

1

T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks

Sharing

General

Malware Config

Extracted

Targets

MITRE ATT&CK Matrix ATT&CK v6

Tasks

static1

behavioral1

behavioral2