emotet

General

Target

03d0e11cd6ce3081ca5ac6958d50eba76959d657afe76b52c846524b05655625
Size

57KB
Sample

220223-agtbqsghgm
MD5

2011ab041b49e369b839a698825122f4
SHA1

3eef2a377bff983f8c4887d3d839f2a8118698f3
SHA256

03d0e11cd6ce3081ca5ac6958d50eba76959d657afe76b52c846524b05655625
SHA512

4cb3177a3c71225b19f3788a56eb90685c538a4d02c652e6d77bcbcccbd529e207392bb1ffae5b5b2518bab024bdc7af6b352453f6ca1c229820ee70c53a11de

Score

10^/10

Malware Config

Extracted

Family

emotet

Botnet

Epoch2

C2

45.33.54.74:443

209.141.41.136:8080

104.236.246.93:8080

198.199.114.69:8080

152.89.236.214:8080

87.106.136.232:8080

178.210.51.222:8080

115.78.95.230:443

201.251.43.69:8080

200.51.94.251:80

31.172.240.91:8080

182.176.132.213:8090

45.33.49.124:443

181.143.53.227:21

186.4.172.5:443

85.104.59.244:20

5.196.74.210:8080

37.157.194.134:443

190.226.44.20:21

86.98.25.30:53

rsa_pubkey.plain

Targets

- Target
  
  03d0e11cd6ce3081ca5ac6958d50eba76959d657afe76b52c846524b05655625
- Size
  
  57KB
- MD5
  
  2011ab041b49e369b839a698825122f4
- SHA1
  
  3eef2a377bff983f8c4887d3d839f2a8118698f3
- SHA256
  
  03d0e11cd6ce3081ca5ac6958d50eba76959d657afe76b52c846524b05655625
- SHA512
  
  4cb3177a3c71225b19f3788a56eb90685c538a4d02c652e6d77bcbcccbd529e207392bb1ffae5b5b2518bab024bdc7af6b352453f6ca1c229820ee70c53a11de
Score

10^/10

emotet banker trojan
- Emotet
  Emotet is a trojan that is primarily spread through spam emails.
  trojan banker emotet
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

1

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Extracted

Targets

Drops file in System32 directory

MITRE ATT&CK Enterprise v6

Tasks

static1

behavioral1

behavioral2