Overview

overview

10

Static

static

9

11e8ee1b7e...72.exe

windows7_x64

10

11e8ee1b7e...72.exe

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    11e8ee1b7e58d72c6f3d5826fc52a59429e731e3717ca1ee2aa858f0770dd072

  • Size

    475KB

  • Sample

    220603-25xgvageh2

  • MD5

    5360fe4aa465da8d210d0d0a83c51c8a

  • SHA1

    df048b2ffbeb1b04c5de40a244a33925bf33c11d

  • SHA256

    11e8ee1b7e58d72c6f3d5826fc52a59429e731e3717ca1ee2aa858f0770dd072

  • SHA512

    5323d5406bd6be21ea1cc36bc6916af1198bcd5c09c60f72163e7269018ab0888648a64fb4ead04c6a692102904f1b2bf3035ac7890a05049766ee1b2da58c5b

Score
10/10
emotetepoch2bankercryptonepackertrojan

Malware Config

Extracted

Family

emotet

Botnet

Epoch2

C2

45.79.188.67:8080

77.237.248.136:8080

185.142.236.163:443

190.108.228.48:990

119.15.153.237:80

31.12.67.62:7080

80.11.163.139:21

190.226.44.20:21

45.33.49.124:443

103.97.95.218:143

187.144.189.58:50000

211.63.71.72:8080

182.76.6.2:8080

138.201.140.110:8080

190.145.67.134:8090

169.239.182.217:8080

46.105.131.87:80

78.24.219.147:8080

91.205.215.66:8080

85.104.59.244:20
rsa_pubkey.plain

Targets

    • Target

      11e8ee1b7e58d72c6f3d5826fc52a59429e731e3717ca1ee2aa858f0770dd072

    • Size

      475KB

    • MD5

      5360fe4aa465da8d210d0d0a83c51c8a

    • SHA1

      df048b2ffbeb1b04c5de40a244a33925bf33c11d

    • SHA256

      11e8ee1b7e58d72c6f3d5826fc52a59429e731e3717ca1ee2aa858f0770dd072

    • SHA512

      5323d5406bd6be21ea1cc36bc6916af1198bcd5c09c60f72163e7269018ab0888648a64fb4ead04c6a692102904f1b2bf3035ac7890a05049766ee1b2da58c5b

    Score
    10/10
    emotetepoch2bankertrojan

    • Emotet

      Emotet is a trojan that is primarily spread through spam emails.

      trojanbankeremotet

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

1
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks