emotet

General

Target

989c98d9f3b87ae105ab068fcf70e52a97355880e8f5fd1f77b847dfa3bef0c5
Size

636KB
Sample

220724-1waq2shhf7
MD5

1fa127b147165936b9519a12e006364f
SHA1

748739c96e327f7393a71f762155f17dfe34f643
SHA256

989c98d9f3b87ae105ab068fcf70e52a97355880e8f5fd1f77b847dfa3bef0c5
SHA512

f28f3cadcdafb2fd02397714cee34da999f04686e5f45e45aed6e9abc432107a23076cff6f78050d111cfdd6e4f8343e853f058d07234bc238f33a0edef9e9ab

Score

10^/10

Malware Config

Extracted

Family

emotet

Botnet

Epoch1

C2

181.59.253.20:21

14.160.93.230:80

74.208.68.48:8080

104.131.58.132:8080

68.183.190.199:8080

62.75.143.100:7080

159.203.204.126:8080

151.80.142.33:80

123.168.4.66:22

46.28.111.142:7080

46.101.212.195:8080

183.82.97.25:80

190.10.194.42:8080

217.199.160.224:8080

186.1.41.111:443

185.86.148.222:8080

185.187.198.10:8080

200.57.102.71:8443

114.79.134.129:443

80.85.87.122:8080

rsa_pubkey.plain

Targets

- Target
  
  989c98d9f3b87ae105ab068fcf70e52a97355880e8f5fd1f77b847dfa3bef0c5
- Size
  
  636KB
- MD5
  
  1fa127b147165936b9519a12e006364f
- SHA1
  
  748739c96e327f7393a71f762155f17dfe34f643
- SHA256
  
  989c98d9f3b87ae105ab068fcf70e52a97355880e8f5fd1f77b847dfa3bef0c5
- SHA512
  
  f28f3cadcdafb2fd02397714cee34da999f04686e5f45e45aed6e9abc432107a23076cff6f78050d111cfdd6e4f8343e853f058d07234bc238f33a0edef9e9ab
Score

10^/10

emotet epoch1 banker trojan
- Emotet
  Emotet is a trojan that is primarily spread through spam emails.
  trojan banker emotet
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

1

T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks

Sharing

General

Malware Config

Extracted

Targets

Drops file in System32 directory

MITRE ATT&CK Matrix ATT&CK v6

Tasks

static1

behavioral1

behavioral2