Description
Emotet is a trojan that is primarily spread through spam emails.
82a44f52d8ea1f85b441d1f9d8a49ec38c6b2da860fbadc42ce429996fa54898
General
Target
Size
Sample
82a44f52d8ea1f85b441d1f9d8a49ec38c6b2da860fbadc42ce429996fa54898
356KB
220521-xnm5macbe7
Score
10 /10
MD5
SHA1
SHA256
SHA512
ae58ba7b5c5ba97eaeaf54228f2af7b1
12fde98f0ce23b5ceaa158bf446ae198d3b11528
82a44f52d8ea1f85b441d1f9d8a49ec38c6b2da860fbadc42ce429996fa54898
f7fd06c83cb9ab1eb063ffb6713d4f98c4a7666f9aceebd1c40f7e9f3034cc926e5479e4ad2fd168bf3741bd63ffb2746b23f18e5eb52a9febc6d2b97146a8c6
Malware Config
Extracted
| Family | emotet |
| Botnet | Epoch4 |
| C2 |
212.24.98.99:8080 51.91.76.89:8080 94.23.45.86:4143 101.50.0.91:8080 103.43.75.120:443 212.237.17.99:8080 158.69.222.101:443 51.254.140.238:7080 1.234.2.232:8080 91.207.28.33:8080 167.172.253.162:8080 45.235.8.30:8080 115.68.227.76:8080 134.122.66.193:8080 89.29.244.7:443 197.242.150.244:8080 164.68.99.3:8080 5.9.116.246:8080 1.234.21.73:7080 131.100.24.231:80 185.4.135.165:8080 72.15.201.15:8080 206.189.28.199:8080 203.114.109.124:443 149.56.131.28:8080 45.176.232.124:443 103.75.201.2:443 58.227.42.236:80 53.61.228.110:19290 172.104.251.154:8080 82.165.152.127:8080 45.118.115.99:8080 201.94.166.162:443 103.70.28.102:8080 213.241.20.155:443 129.232.188.93:443 146.59.226.45:443 173.82.82.196:8080 209.97.163.214:443 159.65.88.10:8080 159.65.140.115:443 160.16.142.56:8080 151.106.112.196:8080 107.170.39.149:8080 77.81.247.144:8080 173.239.37.178:8080 173.212.193.249:8080 163.44.196.120:8080 150.95.66.124:8080 152.136.229.39:8080 |
| eck1.plain |
|
| eck1.plain |
|
Targets
Target
MD5
Filesize
82a44f52d8ea1f85b441d1f9d8a49ec38c6b2da860fbadc42ce429996fa54898
ae58ba7b5c5ba97eaeaf54228f2af7b1
356KB
Score
10/10
SHA1
SHA256
SHA512
12fde98f0ce23b5ceaa158bf446ae198d3b11528
82a44f52d8ea1f85b441d1f9d8a49ec38c6b2da860fbadc42ce429996fa54898
f7fd06c83cb9ab1eb063ffb6713d4f98c4a7666f9aceebd1c40f7e9f3034cc926e5479e4ad2fd168bf3741bd63ffb2746b23f18e5eb52a9febc6d2b97146a8c6
Tags
Signatures
-
Emotet
-
suricata: ET MALWARE W32/Emotet CnC Beacon 3
Description
suricata: ET MALWARE W32/Emotet CnC Beacon 3
Tags
Related Tasks
MITRE ATT&CK Matrix
Collection
Command and Control
Credential Access
Defense Evasion
Discovery
Execution
Exfiltration
Impact
Initial Access
Lateral Movement
Persistence
Privilege Escalation
Tasks