emotet

General

Target

7d92be62c60eed7d35d0ebc647cb5ebf21bcd9cfa1b388183f9f1bd8bab64c8f
Size

258KB
Sample

220731-lcgypahgd8
MD5

afd8672f50f15eb42c63cb944e85d350
SHA1

ac1d08f93d61e8e418c4647da205cb5ba8d8be80
SHA256

7d92be62c60eed7d35d0ebc647cb5ebf21bcd9cfa1b388183f9f1bd8bab64c8f
SHA512

85482bfb8a29497bbef759bd53b59cbf401a618021fd16318bed357b9e6e6b6153a0c391e8da2a2c7eb89554c4c84d11bf4e2e6d73fadc4e46f502806bbd9260

Score

10^/10

Malware Config

Extracted

Family

emotet

Botnet

Epoch1

C2

200.113.106.18:80

94.177.183.28:8080

69.163.33.84:8080

104.131.58.132:8080

149.62.173.247:8080

119.59.124.163:8080

181.143.101.18:8080

187.188.166.192:80

178.79.163.131:8080

185.187.198.10:8080

14.160.93.230:80

62.75.143.100:7080

89.188.124.145:443

190.38.14.52:80

119.92.51.40:8080

181.36.42.205:443

181.51.251.236:443

203.25.159.3:8080

190.1.37.125:443

91.205.215.57:7080

rsa_pubkey.plain

Targets

- Target
  
  7d92be62c60eed7d35d0ebc647cb5ebf21bcd9cfa1b388183f9f1bd8bab64c8f
- Size
  
  258KB
- MD5
  
  afd8672f50f15eb42c63cb944e85d350
- SHA1
  
  ac1d08f93d61e8e418c4647da205cb5ba8d8be80
- SHA256
  
  7d92be62c60eed7d35d0ebc647cb5ebf21bcd9cfa1b388183f9f1bd8bab64c8f
- SHA512
  
  85482bfb8a29497bbef759bd53b59cbf401a618021fd16318bed357b9e6e6b6153a0c391e8da2a2c7eb89554c4c84d11bf4e2e6d73fadc4e46f502806bbd9260
Score

10^/10

emotet epoch1 banker trojan
- Emotet
  Emotet is a trojan that is primarily spread through spam emails.
  trojan banker emotet
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

1

T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks

Sharing

General

Malware Config

Extracted

Targets

Drops file in System32 directory

MITRE ATT&CK Matrix ATT&CK v6

Tasks

static1

behavioral1

behavioral2