emotet

General

Target

f570f153b8e834fe30a3ba90aeb618a0e9e5926d0df533781f121dc784f9d3bc
Size

58KB
Sample

220306-qwmqhaage8
MD5

f70293d937d4cab1a4d5e7149be6e670
SHA1

79d2b78cb813dd6adf3fc24c05daeab403d15f3d
SHA256

f570f153b8e834fe30a3ba90aeb618a0e9e5926d0df533781f121dc784f9d3bc
SHA512

3f935b783ff3c146c2d5742d9567353144a9bc447d06d33fb612c9eb8fdfa6a7137996ee77c390476af42b84159e7f8e8ecb354a65d2e2858760aba42a642c09

Score

10^/10

Malware Config

Extracted

Family

emotet

Botnet

Epoch2

C2

91.121.116.137:443

80.79.23.144:443

192.254.173.31:8080

27.4.80.183:443

31.12.67.62:7080

95.128.43.213:8080

94.192.225.46:80

190.108.228.48:990

186.4.172.5:8080

87.230.19.21:8080

136.243.177.26:8080

185.94.252.13:443

206.189.98.125:8080

190.18.146.70:80

186.75.241.230:80

94.205.247.10:80

211.63.71.72:8080

190.186.203.55:80

115.78.95.230:443

212.71.234.16:8080

rsa_pubkey.plain

Targets

- Target
  
  f570f153b8e834fe30a3ba90aeb618a0e9e5926d0df533781f121dc784f9d3bc
- Size
  
  58KB
- MD5
  
  f70293d937d4cab1a4d5e7149be6e670
- SHA1
  
  79d2b78cb813dd6adf3fc24c05daeab403d15f3d
- SHA256
  
  f570f153b8e834fe30a3ba90aeb618a0e9e5926d0df533781f121dc784f9d3bc
- SHA512
  
  3f935b783ff3c146c2d5742d9567353144a9bc447d06d33fb612c9eb8fdfa6a7137996ee77c390476af42b84159e7f8e8ecb354a65d2e2858760aba42a642c09
Score

10^/10

emotet banker trojan
- Emotet
  Emotet is a trojan that is primarily spread through spam emails.
  trojan banker emotet
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

1

T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks

Sharing

General

Malware Config

Extracted

Targets

Drops file in System32 directory

MITRE ATT&CK Matrix ATT&CK v6

Tasks

static1

behavioral1

behavioral2