emotet

General

Target

2ee9a0e132208680a26b69f93bab71c515ff63e50cd7bf62cc8bdf9f0c88b18c
Size

474KB
Sample

220622-g4l99sbfe6
MD5

52eb27db40de6b43b85819aeb31f38e7
SHA1

78b6c7db77a455bf68ded3099c7c98425c52e85d
SHA256

2ee9a0e132208680a26b69f93bab71c515ff63e50cd7bf62cc8bdf9f0c88b18c
SHA512

b48028f2a19c8cd4c57b0a6a24b440d4d7001804810261585f1bbf357360f7a98be096ca409c1a8f489964aa6142c58fa3d524ca4f19fc6064fdf5820bf420e0

Score

10^/10

Malware Config

Extracted

Family

emotet

Botnet

Epoch2

C2

124.240.198.66:80

186.75.241.230:80

181.143.194.138:443

45.79.188.67:8080

77.237.248.136:8080

185.142.236.163:443

63.142.253.122:8080

178.254.6.27:7080

190.211.207.11:443

78.188.105.159:21

182.176.106.43:995

178.79.161.166:443

206.189.98.125:8080

87.230.19.21:8080

80.11.163.139:443

101.187.237.217:20

190.18.146.70:80

86.98.25.30:53

92.222.125.16:7080

186.4.172.5:443

rsa_pubkey.plain

Targets

- Target
  
  2ee9a0e132208680a26b69f93bab71c515ff63e50cd7bf62cc8bdf9f0c88b18c
- Size
  
  474KB
- MD5
  
  52eb27db40de6b43b85819aeb31f38e7
- SHA1
  
  78b6c7db77a455bf68ded3099c7c98425c52e85d
- SHA256
  
  2ee9a0e132208680a26b69f93bab71c515ff63e50cd7bf62cc8bdf9f0c88b18c
- SHA512
  
  b48028f2a19c8cd4c57b0a6a24b440d4d7001804810261585f1bbf357360f7a98be096ca409c1a8f489964aa6142c58fa3d524ca4f19fc6064fdf5820bf420e0
Score

10^/10

emotet epoch2 banker trojan
- Emotet
  Emotet is a trojan that is primarily spread through spam emails.
  trojan banker emotet
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

1

T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks

Sharing

General

Malware Config

Extracted

Targets

Drops file in System32 directory

MITRE ATT&CK Matrix ATT&CK v6

Tasks

static1

behavioral1

behavioral2