Overview

overview

10

Static

static

10

emotet.exe

windows7_x64

1

emotet.exe

windows10-2004_x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    emotet.bin

  • Size

    48KB

  • MD5

    2f3bbc7c60e9724a51a01c716b71ea51

  • SHA1

    1c90f88e29e71fd12bf874baacba38b10a4e2a69

  • SHA256

    38775922fb2c5b7d54ae42ae6ce9f01f51a074023eb3352e61ffa73b2de988a2

  • SHA512

    406f2d4fb4bd3c797a716e73a1f691dcd27bceeda9bb5253f5097f4f552d7869c0187e94fc1bb44f96635a38ff4b13bb968b1c882e12f404b2ed2efb362a45eb

Score
10/10
epoch2emotet

Malware Config

Extracted

Family

emotet

Botnet

Epoch2

C2

88.153.35.32:80

107.170.146.252:8080

173.212.214.235:7080

167.114.153.111:8080

202.141.243.254:443

75.143.247.51:80

85.105.111.166:80

216.139.123.119:80

113.61.66.94:80

162.241.140.129:8080

190.12.119.180:443

2.58.16.89:8080

91.211.88.52:7080

93.147.212.206:80

71.15.245.148:8080

157.245.99.39:8080

27.114.9.93:80

50.91.114.38:80

174.106.122.139:80

47.36.140.164:80
rsa_pubkey.plain

Signatures

  • Emotet Payload 1 IoCs

    Detects Emotet payload in memory.

  • Emotet family
    emotet

Files

  • emotet.bin
    .exe windows x86


    Code Sign

    Headers

    Sections