emotet

General

Target

dae5bbe0ee7af55427e1e9dced24061dbcb701a53aff04217bdfa8cc260d6683
Size

88KB
Sample

220306-r5zl4adbem
MD5

5594fd3b929e2e30d3d70e4c0063085b
SHA1

90dc29422eef76512b554017c015ddfabd400784
SHA256

dae5bbe0ee7af55427e1e9dced24061dbcb701a53aff04217bdfa8cc260d6683
SHA512

48f152407cfeb71c86def1ed6ae84c1703649cfa5e2d2dfcf501bba17acfdfbc59f62c53a10d6e83bf17916a62115f658d0bd0f9ace68b1b2370cdd32c0df7dd

Score

10^/10

Malware Config

Extracted

Family

emotet

Botnet

Epoch2

C2

91.121.116.137:443

80.79.23.144:443

192.254.173.31:8080

27.4.80.183:443

31.12.67.62:7080

95.128.43.213:8080

94.192.225.46:80

190.108.228.48:990

186.4.172.5:8080

87.230.19.21:8080

136.243.177.26:8080

185.94.252.13:443

206.189.98.125:8080

190.18.146.70:80

186.75.241.230:80

94.205.247.10:80

211.63.71.72:8080

190.186.203.55:80

115.78.95.230:443

212.71.234.16:8080

rsa_pubkey.plain

Targets

- Target
  
  dae5bbe0ee7af55427e1e9dced24061dbcb701a53aff04217bdfa8cc260d6683
- Size
  
  88KB
- MD5
  
  5594fd3b929e2e30d3d70e4c0063085b
- SHA1
  
  90dc29422eef76512b554017c015ddfabd400784
- SHA256
  
  dae5bbe0ee7af55427e1e9dced24061dbcb701a53aff04217bdfa8cc260d6683
- SHA512
  
  48f152407cfeb71c86def1ed6ae84c1703649cfa5e2d2dfcf501bba17acfdfbc59f62c53a10d6e83bf17916a62115f658d0bd0f9ace68b1b2370cdd32c0df7dd
Score

10^/10

emotet banker trojan
- Emotet
  Emotet is a trojan that is primarily spread through spam emails.
  trojan banker emotet
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

1

T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks

Sharing

General

Malware Config

Extracted

Targets

Drops file in System32 directory

MITRE ATT&CK Matrix ATT&CK v6

Tasks

static1

behavioral1

behavioral2