emotet

General

Target

ppfhzxrq
Size

664KB
Sample

220411-dx5lgsggen
MD5

5c8b15dfdd2f021a32f8f0372bd11c3e
SHA1

cb9ee23e2870751cfda17a689b8bddace918d506
SHA256

f7ab0e91e0a5e8b63612255501ef463653879d563a0672e892755ddf3bda0fd0
SHA512

e93ebaac8548e07a32e63f35e25aec5e531116f3d40e04fda059793ec78ed3b49ffe23e34732e74fa6aeeeaa4944bfab298844828fabe84fb131c022161e92de

Score

10^/10

Malware Config

Extracted

Family

emotet

Botnet

Epoch4

C2

149.56.128.192:443

120.50.40.183:80

160.16.218.63:8080

217.182.25.250:8080

119.193.124.41:7080

103.75.201.2:443

195.201.151.129:8080

131.100.24.231:80

159.65.88.10:8080

1.234.21.73:7080

5.9.116.246:8080

103.75.201.4:443

176.104.106.96:8080

138.185.72.26:8080

212.237.17.99:8080

72.15.201.15:8080

103.43.46.182:443

207.38.84.195:8080

46.55.222.11:443

1.234.2.232:8080

eck1.plain

ecs1.plain

Targets

- Target
  
  ppfhzxrq
- Size
  
  664KB
- MD5
  
  5c8b15dfdd2f021a32f8f0372bd11c3e
- SHA1
  
  cb9ee23e2870751cfda17a689b8bddace918d506
- SHA256
  
  f7ab0e91e0a5e8b63612255501ef463653879d563a0672e892755ddf3bda0fd0
- SHA512
  
  e93ebaac8548e07a32e63f35e25aec5e531116f3d40e04fda059793ec78ed3b49ffe23e34732e74fa6aeeeaa4944bfab298844828fabe84fb131c022161e92de
Score

10^/10

emotet epoch4 banker suricata trojan
- Emotet
  Emotet is a trojan that is primarily spread through spam emails.
  trojan banker emotet
- suricata: ET MALWARE W32/Emotet CnC Beacon 3
  suricata: ET MALWARE W32/Emotet CnC Beacon 3
  suricata
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

Sharing

General

Malware Config

Extracted

Targets

suricata: ET MALWARE W32/Emotet CnC Beacon 3

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

behavioral2