emotet

General

Target

65463c411a1b15fdb4c339d4359ebd59921d0067cd463c8a33bed3948e85dc08
Size

369KB
Sample

220724-1wkagsabfk
MD5

f7f49deb2b8bc30637628fa4a7917e61
SHA1

f341330f3e3ba6d33ed73c9033d4c616e75a4ffc
SHA256

65463c411a1b15fdb4c339d4359ebd59921d0067cd463c8a33bed3948e85dc08
SHA512

f4c93c8a1451650dfbdb1905ade2aefa5b59d8783bb736652d888d120f8b4d4c6af1879b08bd2ae59b8fc5e3c8b55a29c59d11e21c4781b9dac2d893f72da6ab

Score

10^/10

Malware Config

Extracted

Family

emotet

Botnet

Epoch1

C2

186.90.29.228:443

181.135.153.203:443

74.208.68.48:8080

104.131.58.132:8080

68.183.190.199:8080

46.28.111.142:7080

186.0.95.172:80

46.41.151.103:8080

190.230.60.129:80

181.188.149.134:80

88.250.223.190:8080

183.82.97.25:80

212.71.237.140:8080

200.57.102.71:8443

189.166.68.89:443

170.84.133.72:7080

81.169.140.14:443

149.62.173.247:8080

94.183.71.206:7080

142.93.82.57:8080

rsa_pubkey.plain

Targets

- Target
  
  65463c411a1b15fdb4c339d4359ebd59921d0067cd463c8a33bed3948e85dc08
- Size
  
  369KB
- MD5
  
  f7f49deb2b8bc30637628fa4a7917e61
- SHA1
  
  f341330f3e3ba6d33ed73c9033d4c616e75a4ffc
- SHA256
  
  65463c411a1b15fdb4c339d4359ebd59921d0067cd463c8a33bed3948e85dc08
- SHA512
  
  f4c93c8a1451650dfbdb1905ade2aefa5b59d8783bb736652d888d120f8b4d4c6af1879b08bd2ae59b8fc5e3c8b55a29c59d11e21c4781b9dac2d893f72da6ab
Score

10^/10

emotet epoch1 banker trojan
- Emotet
  Emotet is a trojan that is primarily spread through spam emails.
  trojan banker emotet
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

1

T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks

Sharing

General

Malware Config

Extracted

Targets

Drops file in System32 directory

MITRE ATT&CK Matrix ATT&CK v6

Tasks

static1

behavioral1

behavioral2