Overview

overview

10

Static

static

5a6db057d7...fb.exe

windows7-x64

10

5a6db057d7...fb.exe

windows10-2004-x64

10

Resubmissions

02-08-2022 21:20

220802-z62f3schdm 10

02-08-2022 03:35

220802-d5ep2aaeak 10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    5a6db057d7bd551cfe5932c83e899556c2f0a746cbfd8c946f4cc69fcc188efb

  • Size

    291KB

  • Sample

    220802-z62f3schdm

  • MD5

    7d95968618301af84f0efd4bef3b0206

  • SHA1

    b0890b1e5e0c078d1dfbd1630b40ec86e88a2aad

  • SHA256

    5a6db057d7bd551cfe5932c83e899556c2f0a746cbfd8c946f4cc69fcc188efb

  • SHA512

    370f248e53d6b8705194640a0f083ce61a6dec830e912c2a78dd7807b052c26f7f512148169e93411fd33ad3dd29d49bedc48b1fdf6a73b11b9cb894f6af57dd

Score
10/10
emotetepoch2bankertrojan

Malware Config

Extracted

Family

emotet

Botnet

Epoch2

C2

86.22.221.170:80

187.144.61.73:443

185.94.252.13:443

46.105.131.87:80

69.164.201.54:8080

27.147.163.188:8080

182.176.106.43:995

115.78.95.230:443

87.106.139.101:8080

185.187.198.15:80

186.4.172.5:443

91.205.215.66:8080

47.41.213.2:22

87.230.19.21:8080

59.103.164.174:80

190.145.67.134:8090

92.222.216.44:8080

24.45.195.162:8443

190.211.207.11:443

169.239.182.217:8080
rsa_pubkey.plain

Targets

    • Target

      5a6db057d7bd551cfe5932c83e899556c2f0a746cbfd8c946f4cc69fcc188efb

    • Size

      291KB

    • MD5

      7d95968618301af84f0efd4bef3b0206

    • SHA1

      b0890b1e5e0c078d1dfbd1630b40ec86e88a2aad

    • SHA256

      5a6db057d7bd551cfe5932c83e899556c2f0a746cbfd8c946f4cc69fcc188efb

    • SHA512

      370f248e53d6b8705194640a0f083ce61a6dec830e912c2a78dd7807b052c26f7f512148169e93411fd33ad3dd29d49bedc48b1fdf6a73b11b9cb894f6af57dd

    Score
    10/10
    emotetepoch2bankertrojan

    • Emotet

      Emotet is a trojan that is primarily spread through spam emails.

      trojanbankeremotet

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

1
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks