emotet

General

Target

9371f8301e71c4bc8244a04e52a839569cedfe8848a531311902f35d79502beb
Size

568KB
Sample

220302-e2mrxaeecm
MD5

56b0b7eb3b314ea13f4e16670930aad7
SHA1

613035abd39e08e9181602989bf3412f76643bc0
SHA256

9371f8301e71c4bc8244a04e52a839569cedfe8848a531311902f35d79502beb
SHA512

ac7645c70486ad4031da67665130d6895583caa56945946e93d21dd650bacd8e32bf9d8098bc99a1100fa10d734119a037fa0dff8655ad236d9d561509203cf7

Score

10^/10

Malware Config

Extracted

Family

emotet

Botnet

Epoch2

C2

88.153.35.32:80

107.170.146.252:8080

173.212.214.235:7080

167.114.153.111:8080

202.141.243.254:443

75.143.247.51:80

85.105.111.166:80

216.139.123.119:80

113.61.66.94:80

162.241.140.129:8080

190.12.119.180:443

2.58.16.89:8080

91.211.88.52:7080

93.147.212.206:80

71.15.245.148:8080

157.245.99.39:8080

27.114.9.93:80

50.91.114.38:80

174.106.122.139:80

47.36.140.164:80

rsa_pubkey.plain

Targets

- Target
  
  9371f8301e71c4bc8244a04e52a839569cedfe8848a531311902f35d79502beb
- Size
  
  568KB
- MD5
  
  56b0b7eb3b314ea13f4e16670930aad7
- SHA1
  
  613035abd39e08e9181602989bf3412f76643bc0
- SHA256
  
  9371f8301e71c4bc8244a04e52a839569cedfe8848a531311902f35d79502beb
- SHA512
  
  ac7645c70486ad4031da67665130d6895583caa56945946e93d21dd650bacd8e32bf9d8098bc99a1100fa10d734119a037fa0dff8655ad236d9d561509203cf7
Score

10^/10

emotet epoch2 banker trojan suricata
- Emotet
  Emotet is a trojan that is primarily spread through spam emails.
  trojan banker emotet
- suricata: ET MALWARE Win32/Emotet CnC Activity (POST) M11
  suricata: ET MALWARE Win32/Emotet CnC Activity (POST) M11
  suricata
- Emotet Payload
  Detects Emotet payload in memory.
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

Sharing

General

Malware Config

Extracted

Targets

suricata: ET MALWARE Win32/Emotet CnC Activity (POST) M11

Emotet Payload

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

behavioral2