emotet

General

Target

4e5257f3269d45a08e9aebc15fbc27c0de9c5b5481008b2158f164b1c6d0d697
Size

607KB
Sample

220720-wk51ladha6
MD5

781a26507093dd6c3f2e38e6864fc502
SHA1

33e84acc42351abfabd8481d4c53a48412400e4e
SHA256

4e5257f3269d45a08e9aebc15fbc27c0de9c5b5481008b2158f164b1c6d0d697
SHA512

d0e707e62175e0ca3557262d517e84e1401646448c67f94c2039c51ed2128cc2393f70348c5f30a63c4c46d7857dbea1524c4071579f162a40aa1aca207b12ff

Score

10^/10

Malware Config

Extracted

Family

emotet

Botnet

Epoch1

C2

186.90.29.228:443

181.135.153.203:443

74.208.68.48:8080

104.131.58.132:8080

68.183.190.199:8080

50.28.51.143:8080

77.55.211.77:8080

181.29.101.13:8080

178.79.163.131:8080

5.1.86.195:8080

187.188.166.192:80

203.25.159.3:8080

139.5.237.27:443

190.1.37.125:443

200.58.171.51:80

186.1.41.111:443

46.29.183.211:8080

109.169.86.13:8080

71.244.60.231:7080

159.203.204.126:8080

rsa_pubkey.plain

Targets

- Target
  
  4e5257f3269d45a08e9aebc15fbc27c0de9c5b5481008b2158f164b1c6d0d697
- Size
  
  607KB
- MD5
  
  781a26507093dd6c3f2e38e6864fc502
- SHA1
  
  33e84acc42351abfabd8481d4c53a48412400e4e
- SHA256
  
  4e5257f3269d45a08e9aebc15fbc27c0de9c5b5481008b2158f164b1c6d0d697
- SHA512
  
  d0e707e62175e0ca3557262d517e84e1401646448c67f94c2039c51ed2128cc2393f70348c5f30a63c4c46d7857dbea1524c4071579f162a40aa1aca207b12ff
Score

10^/10

emotet epoch1 banker trojan
- Emotet
  Emotet is a trojan that is primarily spread through spam emails.
  trojan banker emotet
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

1

T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks

Sharing

General

Malware Config

Extracted

Targets

Drops file in System32 directory

MITRE ATT&CK Matrix ATT&CK v6

Tasks

static1

behavioral1

behavioral2