Overview

overview

10

Static

static

4e36278eca...81.exe

windows7_x64

10

4e36278eca...81.exe

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    4e36278eca4d78e71c21327097c692b9d1f80abf7ad743d468f2a1765b7ff181

  • Size

    568KB

  • Sample

    220301-hrj5tagfh2

  • MD5

    711de965163c03f7a22822fabb76dc84

  • SHA1

    3f72724f06092fde0c4cbcfbac118dbff070d8d8

  • SHA256

    4e36278eca4d78e71c21327097c692b9d1f80abf7ad743d468f2a1765b7ff181

  • SHA512

    9dd55346fa2d116a5bc4e6f17d6378837ad4de6b45fff9976159724329f230dec6024093f1a3e4cf4b58b7907f611cc0cd7499ef183aa85fa5e9c3360c90637f

Score
10/10
emotetepoch2bankertrojan

Malware Config

Extracted

Family

emotet

Botnet

Epoch2

C2

88.153.35.32:80

107.170.146.252:8080

173.212.214.235:7080

167.114.153.111:8080

202.141.243.254:443

75.143.247.51:80

85.105.111.166:80

216.139.123.119:80

113.61.66.94:80

162.241.140.129:8080

190.12.119.180:443

2.58.16.89:8080

91.211.88.52:7080

93.147.212.206:80

71.15.245.148:8080

157.245.99.39:8080

27.114.9.93:80

50.91.114.38:80

174.106.122.139:80

47.36.140.164:80
rsa_pubkey.plain

Targets

    • Target

      4e36278eca4d78e71c21327097c692b9d1f80abf7ad743d468f2a1765b7ff181

    • Size

      568KB

    • MD5

      711de965163c03f7a22822fabb76dc84

    • SHA1

      3f72724f06092fde0c4cbcfbac118dbff070d8d8

    • SHA256

      4e36278eca4d78e71c21327097c692b9d1f80abf7ad743d468f2a1765b7ff181

    • SHA512

      9dd55346fa2d116a5bc4e6f17d6378837ad4de6b45fff9976159724329f230dec6024093f1a3e4cf4b58b7907f611cc0cd7499ef183aa85fa5e9c3360c90637f

    Score
    10/10
    emotetepoch2bankertrojan

    • Emotet

      Emotet is a trojan that is primarily spread through spam emails.

      trojanbankeremotet

    • Emotet Payload

      Detects Emotet payload in memory.

    • Executes dropped EXE

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

1
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks