Overview

overview

10

Static

static

10

ba0fb39c55...b4.exe

windows7_x64

10

ba0fb39c55...b4.exe

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ba0fb39c556248f066151ae165b709e6c8097da7cfecd7cd6c3ee2d9f25ad9b4

  • Size

    59KB

  • Sample

    220306-tmev3sdhhp

  • MD5

    1e5648d9e17b3db0a4c5b2b852a0e06c

  • SHA1

    2d3e090bb2384f361a4fe9341fb1b33b3f58713f

  • SHA256

    ba0fb39c556248f066151ae165b709e6c8097da7cfecd7cd6c3ee2d9f25ad9b4

  • SHA512

    417ea75b54b9a65f7c8fbeb2cab84ae18e7a8b6166f4d1b4d3325b2beeb82e2c059d150a7fb9db147307416d5c0426b1c73577acc2cbabd56bdf8b1dafd23bc9

Score
10/10
emotetepoch2bankertrojan

Malware Config

Extracted

Family

emotet

Botnet

Epoch2

C2

186.4.172.5:443

117.197.124.36:443

37.208.39.59:7080

186.4.172.5:8080

182.176.106.43:995

178.62.37.188:443

92.51.129.249:4143

92.222.125.16:7080

142.44.162.209:8080

31.12.67.62:7080

177.246.193.139:20

88.156.97.210:80

87.106.139.101:8080

136.243.177.26:8080

222.214.218.192:8080

87.230.19.21:8080

190.53.135.159:21

87.106.136.232:8080

178.79.161.166:443

206.189.98.125:8080
rsa_pubkey.plain

Targets

    • Target

      ba0fb39c556248f066151ae165b709e6c8097da7cfecd7cd6c3ee2d9f25ad9b4

    • Size

      59KB

    • MD5

      1e5648d9e17b3db0a4c5b2b852a0e06c

    • SHA1

      2d3e090bb2384f361a4fe9341fb1b33b3f58713f

    • SHA256

      ba0fb39c556248f066151ae165b709e6c8097da7cfecd7cd6c3ee2d9f25ad9b4

    • SHA512

      417ea75b54b9a65f7c8fbeb2cab84ae18e7a8b6166f4d1b4d3325b2beeb82e2c059d150a7fb9db147307416d5c0426b1c73577acc2cbabd56bdf8b1dafd23bc9

    Score
    10/10
    emotetbankertrojan

    • Emotet

      Emotet is a trojan that is primarily spread through spam emails.

      trojanbankeremotet

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

1
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks