Overview

overview

10

Static

static

1d703d8436...e6.exe

windows7-x64

10

1d703d8436...e6.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    1d703d84368e0c53f6706276da6858bdd7df55e6.exe
  • Size 276KB
  • Sample221130-gva6msdb56
  • SHA256 09819925fdc296619617875dc4a026ed5657b455c0520c53729430e951e752f2
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10
emotetepoch2bankertrojan

Malware Config

Extracted

Family

  • emotet

Botnet

  • Epoch2

C2

  • 124.240.198.66:80

  • 186.75.241.230:80

  • 181.143.194.138:443

  • 45.79.188.67:8080

  • 77.237.248.136:8080

  • 185.142.236.163:443

  • 63.142.253.122:8080

  • 178.254.6.27:7080

  • 190.211.207.11:443

  • 78.188.105.159:21

  • 182.176.106.43:995

  • 178.79.161.166:443

  • 206.189.98.125:8080

  • 87.230.19.21:8080

  • 80.11.163.139:443

  • 101.187.237.217:20

  • 190.18.146.70:80

  • 86.98.25.30:53

  • 92.222.125.16:7080

  • 186.4.172.5:443

rsa_pubkey.plain

Targets

    • Target
      1d703d84368e0c53f6706276da6858bdd7df55e6.exe
    • Size 276KB
    • SHA256 09819925fdc296619617875dc4a026ed5657b455c0520c53729430e951e752f2
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    emotetepoch2bankertrojan

    • Emotet

      Emotet is a trojan that is primarily spread through spam emails.

      trojanbankeremotet

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks