emotet

General

Target

b9c7d471ba8f1ebabe835982ca79cad248f43214be81bb4db3709b88cd1f80f6
Size

70KB
Sample

220306-tmqycaeaak
MD5

5456e6445d95334f5124c1a086a189af
SHA1

cd74c58e422ca15bb6beb2525bb0379e0d168509
SHA256

b9c7d471ba8f1ebabe835982ca79cad248f43214be81bb4db3709b88cd1f80f6
SHA512

72db6f95d8704e2a0721b3a8d043681e00072de7caecebdc325cc249376b0ff17f66257497e72d4af9d76508d43a6a46d75cb34eb6876fba56b991f05c72f286

Score

10^/10

Malware Config

Extracted

Family

emotet

Botnet

Epoch2

C2

186.4.172.5:443

117.197.124.36:443

37.208.39.59:7080

186.4.172.5:8080

182.176.106.43:995

178.62.37.188:443

92.51.129.249:4143

92.222.125.16:7080

142.44.162.209:8080

31.12.67.62:7080

46.105.131.87:80

92.222.216.44:8080

87.106.136.232:8080

103.97.95.218:143

190.145.67.134:8090

104.236.246.93:8080

88.156.97.210:80

175.100.138.82:22

78.24.219.147:8080

91.205.215.66:8080

rsa_pubkey.plain

Targets

- Target
  
  b9c7d471ba8f1ebabe835982ca79cad248f43214be81bb4db3709b88cd1f80f6
- Size
  
  70KB
- MD5
  
  5456e6445d95334f5124c1a086a189af
- SHA1
  
  cd74c58e422ca15bb6beb2525bb0379e0d168509
- SHA256
  
  b9c7d471ba8f1ebabe835982ca79cad248f43214be81bb4db3709b88cd1f80f6
- SHA512
  
  72db6f95d8704e2a0721b3a8d043681e00072de7caecebdc325cc249376b0ff17f66257497e72d4af9d76508d43a6a46d75cb34eb6876fba56b991f05c72f286
Score

10^/10

emotet banker trojan
- Emotet
  Emotet is a trojan that is primarily spread through spam emails.
  trojan banker emotet
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

1

T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks

Sharing

General

Malware Config

Extracted

Targets

Drops file in System32 directory

MITRE ATT&CK Matrix ATT&CK v6

Tasks

static1

behavioral1

behavioral2