emotet

General

Target

65ff9abc2107969dd3df7b0ca12ebd7537b628e5e2285ea2309f2d64da1f77d4
Size

336KB
Sample

220724-137z5aabd4
MD5

0051bd1fcc29c003f45d4439e2728beb
SHA1

e325007b1cade3c4c085727fb6c9477c52a1e2a7
SHA256

65ff9abc2107969dd3df7b0ca12ebd7537b628e5e2285ea2309f2d64da1f77d4
SHA512

4bfbdc8857e4fe985b3e760c3c952ed3d786ef19dc15ababc9051539956c43df1c7fb174d93335a7657952ab98cd4376b19232846927afc7ffe5103d1d10b27b

Score

10^/10

Malware Config

Extracted

Family

emotet

Botnet

Epoch1

C2

152.170.108.99:443

99.252.27.6:80

93.148.252.90:80

96.126.121.64:443

104.236.137.72:8080

85.234.143.94:8080

80.85.87.122:8080

2.139.158.136:443

80.11.158.65:8080

79.31.85.103:80

77.55.211.77:8080

96.61.113.203:80

181.198.203.45:443

142.93.114.137:8080

186.15.83.52:8080

181.36.42.205:443

68.183.190.199:8080

159.203.204.126:8080

50.28.51.143:8080

46.101.212.195:8080

rsa_pubkey.plain

Targets

- Target
  
  65ff9abc2107969dd3df7b0ca12ebd7537b628e5e2285ea2309f2d64da1f77d4
- Size
  
  336KB
- MD5
  
  0051bd1fcc29c003f45d4439e2728beb
- SHA1
  
  e325007b1cade3c4c085727fb6c9477c52a1e2a7
- SHA256
  
  65ff9abc2107969dd3df7b0ca12ebd7537b628e5e2285ea2309f2d64da1f77d4
- SHA512
  
  4bfbdc8857e4fe985b3e760c3c952ed3d786ef19dc15ababc9051539956c43df1c7fb174d93335a7657952ab98cd4376b19232846927afc7ffe5103d1d10b27b
Score

10^/10

emotet epoch1 banker trojan
- Emotet
  Emotet is a trojan that is primarily spread through spam emails.
  trojan banker emotet
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

1

T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks

Sharing

General

Malware Config

Extracted

Targets

Drops file in System32 directory

MITRE ATT&CK Matrix ATT&CK v6

Tasks

static1

behavioral1

behavioral2