emotet

General

Target

e0ff6c10a2da6041b7e95a2de568382c964dd452130a1eb623fae64c7f480ba6
Size

744KB
Sample

210913-jlxz6agccl
MD5

307f1a3b77cec85ddc3597ac97095cb7
SHA1

08311ddf8d849761f535f4b6d083076ed4c083bb
SHA256

e0ff6c10a2da6041b7e95a2de568382c964dd452130a1eb623fae64c7f480ba6
SHA512

0b947588335fc4662deedeca39e5378701d90ee6e18213f9e5d12dfc196497fbe3f1b6cbc44f81389765179b781bf11d3f430c099c4774c5c76756523a4d8d79

Score

10^/10

Malware Config

Extracted

Family

emotet

Botnet

Epoch2

C2

71.208.216.10:80

212.51.142.238:8080

5.39.91.110:7080

109.74.5.95:8080

121.124.124.40:7080

139.130.242.43:80

162.241.92.219:8080

93.156.165.186:80

203.153.216.189:7080

169.239.182.217:8080

78.189.165.52:8080

37.187.72.193:8080

110.145.77.103:80

190.144.18.198:80

209.182.216.177:443

74.208.45.104:8080

209.141.54.221:8080

190.160.53.126:80

87.106.139.101:8080

176.111.60.55:8080

rsa_pubkey.plain

Targets

- Target
  
  e0ff6c10a2da6041b7e95a2de568382c964dd452130a1eb623fae64c7f480ba6
- Size
  
  744KB
- MD5
  
  307f1a3b77cec85ddc3597ac97095cb7
- SHA1
  
  08311ddf8d849761f535f4b6d083076ed4c083bb
- SHA256
  
  e0ff6c10a2da6041b7e95a2de568382c964dd452130a1eb623fae64c7f480ba6
- SHA512
  
  0b947588335fc4662deedeca39e5378701d90ee6e18213f9e5d12dfc196497fbe3f1b6cbc44f81389765179b781bf11d3f430c099c4774c5c76756523a4d8d79
Score

10^/10

emotet epoch2 banker trojan suricata
- Emotet
  Emotet is a trojan that is primarily spread through spam emails.
  trojan banker emotet
- suricata: ET MALWARE Win32/Emotet CnC Activity (POST) M8
  suricata: ET MALWARE Win32/Emotet CnC Activity (POST) M8
  suricata
- Emotet Payload
  Detects Emotet payload in memory.
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

Sharing

General

Malware Config

Extracted

Targets

suricata: ET MALWARE Win32/Emotet CnC Activity (POST) M8

Emotet Payload

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

behavioral2