emotet

General

Target

8cceffc014472f8fe8348fd58d72d58b82f8bbf301a8e82ab8a5ebb8280ab64c
Size

72KB
Sample

220724-2hf7cabaa5
MD5

51801dd662996adf7943ce94243324a8
SHA1

a0568dfb3e4f6d8b40ba4dda3bda15470f521836
SHA256

8cceffc014472f8fe8348fd58d72d58b82f8bbf301a8e82ab8a5ebb8280ab64c
SHA512

7c72b3f1811e1e9ab0f107d52b64aa662b06c3417f2b504d3d3cc711eff928395d186b1b7e0722b43b63b2f0de18ce1c5b8758b5fb5eebefc05b20f16bf3ff3a

Score

10^/10

Malware Config

Extracted

Family

emotet

Botnet

Epoch2

C2

149.167.86.174:990

181.164.8.25:80

181.143.194.138:443

192.241.250.202:8080

63.142.253.122:8080

178.254.6.27:7080

92.222.125.16:7080

142.44.162.209:8080

86.98.25.30:53

31.172.240.91:8080

149.202.153.252:8080

201.250.11.236:50000

189.129.231.76:20

182.76.6.2:8080

189.209.217.49:80

87.106.136.232:8080

91.205.215.66:8080

212.71.234.16:8080

178.79.161.166:443

162.243.125.212:8080

rsa_pubkey.plain

Targets

- Target
  
  8cceffc014472f8fe8348fd58d72d58b82f8bbf301a8e82ab8a5ebb8280ab64c
- Size
  
  72KB
- MD5
  
  51801dd662996adf7943ce94243324a8
- SHA1
  
  a0568dfb3e4f6d8b40ba4dda3bda15470f521836
- SHA256
  
  8cceffc014472f8fe8348fd58d72d58b82f8bbf301a8e82ab8a5ebb8280ab64c
- SHA512
  
  7c72b3f1811e1e9ab0f107d52b64aa662b06c3417f2b504d3d3cc711eff928395d186b1b7e0722b43b63b2f0de18ce1c5b8758b5fb5eebefc05b20f16bf3ff3a
Score

10^/10

emotet banker trojan
- Emotet
  Emotet is a trojan that is primarily spread through spam emails.
  trojan banker emotet
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

1

T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks

Sharing

General

Malware Config

Extracted

Targets

Drops file in System32 directory

MITRE ATT&CK Matrix ATT&CK v6

Tasks

static1

behavioral1

behavioral2