emotet

General

Target

91c195410f9100d9d92102829087bcfd011b5e07667f1d03dbf340d4671c1265
Size

636KB
Sample

220226-jbgkesbbgq
MD5

766963f23a59de5f3bda29b6ea5001e6
SHA1

dc4fb9e6a04630d2dc70bf61e4f44b486944139b
SHA256

91c195410f9100d9d92102829087bcfd011b5e07667f1d03dbf340d4671c1265
SHA512

598279171d1d40d34859ba66296e32077695937205056b08d5431f45e1f802944549fc995959c1e6253424029f6692e2ae07efceb1a314d7799bc1382297b215

Score

10^/10

Malware Config

Extracted

Family

emotet

Botnet

Epoch2

C2

185.155.20.82:80

82.223.70.24:8080

58.171.38.26:80

103.86.49.11:8080

31.31.77.83:443

92.222.216.44:8080

186.208.123.210:443

136.243.205.112:7080

60.130.173.117:80

160.16.215.66:8080

98.15.140.226:80

162.241.92.219:8080

78.186.5.109:443

87.127.197.7:8080

168.235.67.138:7080

210.56.10.58:80

60.250.78.22:443

114.145.241.208:80

104.131.11.150:443

62.75.141.82:80

rsa_pubkey.plain

Targets

- Target
  
  91c195410f9100d9d92102829087bcfd011b5e07667f1d03dbf340d4671c1265
- Size
  
  636KB
- MD5
  
  766963f23a59de5f3bda29b6ea5001e6
- SHA1
  
  dc4fb9e6a04630d2dc70bf61e4f44b486944139b
- SHA256
  
  91c195410f9100d9d92102829087bcfd011b5e07667f1d03dbf340d4671c1265
- SHA512
  
  598279171d1d40d34859ba66296e32077695937205056b08d5431f45e1f802944549fc995959c1e6253424029f6692e2ae07efceb1a314d7799bc1382297b215
Score

10^/10

emotet epoch2 banker trojan suricata
- Emotet
  Emotet is a trojan that is primarily spread through spam emails.
  trojan banker emotet
- suricata: ET MALWARE Win32/Emotet CnC Activity (POST) M8
  suricata: ET MALWARE Win32/Emotet CnC Activity (POST) M8
  suricata
- suricata: ET MALWARE Win32/Emotet CnC Activity (POST) M9
  suricata: ET MALWARE Win32/Emotet CnC Activity (POST) M9
  suricata
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

Sharing

General

Malware Config

Extracted

Targets

suricata: ET MALWARE Win32/Emotet CnC Activity (POST) M8

suricata: ET MALWARE Win32/Emotet CnC Activity (POST) M9

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

behavioral2