Overview

overview

10

Static

static

9

20faa083db...32.exe

windows7_x64

10

20faa083db...32.exe

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    20faa083db6e5097fae1b17cdf97b406edbd91546d835f0e1250816382505332

  • Size

    475KB

  • Sample

    220612-l2rt7acec2

  • MD5

    0382db67cb80321487c6a86fdb1ab1a9

  • SHA1

    ddb874b869d96ce51e5355ace551428b160c6604

  • SHA256

    20faa083db6e5097fae1b17cdf97b406edbd91546d835f0e1250816382505332

  • SHA512

    3c319bf3c5a87fe6cd1d121bc9935ff097b365d59f6e2847fb1f6e1b41ea1953c78e05f20b987c70611e730ef500d09fb011576ba148d318d184dbc9675d75c4

Score
10/10
emotetepoch2bankercryptonepackertrojan

Malware Config

Extracted

Family

emotet

Botnet

Epoch2

C2

124.240.198.66:80

186.75.241.230:80

181.143.194.138:443

45.79.188.67:8080

77.237.248.136:8080

185.142.236.163:443

63.142.253.122:8080

178.254.6.27:7080

190.211.207.11:443

78.188.105.159:21

182.176.106.43:995

178.79.161.166:443

206.189.98.125:8080

87.230.19.21:8080

80.11.163.139:443

101.187.237.217:20

190.18.146.70:80

86.98.25.30:53

92.222.125.16:7080

186.4.172.5:443
rsa_pubkey.plain

Targets

    • Target

      20faa083db6e5097fae1b17cdf97b406edbd91546d835f0e1250816382505332

    • Size

      475KB

    • MD5

      0382db67cb80321487c6a86fdb1ab1a9

    • SHA1

      ddb874b869d96ce51e5355ace551428b160c6604

    • SHA256

      20faa083db6e5097fae1b17cdf97b406edbd91546d835f0e1250816382505332

    • SHA512

      3c319bf3c5a87fe6cd1d121bc9935ff097b365d59f6e2847fb1f6e1b41ea1953c78e05f20b987c70611e730ef500d09fb011576ba148d318d184dbc9675d75c4

    Score
    10/10
    emotetepoch2bankertrojan

    • Emotet

      Emotet is a trojan that is primarily spread through spam emails.

      trojanbankeremotet

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

1
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks