emotet | 0b8682fe1ee1d9a8ad485452179e9c8651c682660591077e0fb7077e89af81bd | Triage

Resubmissions

08-11-2023 20:05

231108-yvb7daeg47 10

07-11-2023 13:34

231107-qvbxlsef81 10

Sharing

General

Target

emotet.exe
Size

645KB
Sample

231108-yvb7daeg47
MD5

6f262e779fc26d8dd89c942c744eecba
SHA1

7e1221991f652f468b71b0050276f6588f3ab562
SHA256

0b8682fe1ee1d9a8ad485452179e9c8651c682660591077e0fb7077e89af81bd
SHA512

5831b66c566ef87fddd33c22fe1120c451477f298da66bc48813445470f28ab767d19f02127547d2652be11f01650c0f9b2a1b3a13d2d2d523cd58d53208ca20
SSDEEP

12288:UF+tM6XshMhiEPV8dltumwktXEaUfRLN7ku4xAYuIbm6YvKKypnweFcqFXeN2wq:O/6XqMciFypnwscqReN2D

Score

10^/10

emotet epoch5 banker trojan

Malware Config

Extracted

Family

emotet

Botnet

Epoch5

C2

103.85.95.4:8080

103.224.241.74:8080

178.238.225.252:8080

37.59.103.148:8080

78.47.204.80:443

138.197.14.67:8080

128.199.242.164:8080

54.37.228.122:443

37.44.244.177:8080

139.59.80.108:8080

218.38.121.17:443

82.98.180.154:7080

114.79.130.68:443

159.65.135.222:7080

174.138.33.49:7080

195.77.239.39:8080

193.194.92.175:443

198.199.70.22:8080

85.214.67.203:8080

93.84.115.205:7080

ecs1.plain

eck1.plain

Targets

- Target
  
  emotet.exe
- Size
  
  645KB
- MD5
  
  6f262e779fc26d8dd89c942c744eecba
- SHA1
  
  7e1221991f652f468b71b0050276f6588f3ab562
- SHA256
  
  0b8682fe1ee1d9a8ad485452179e9c8651c682660591077e0fb7077e89af81bd
- SHA512
  
  5831b66c566ef87fddd33c22fe1120c451477f298da66bc48813445470f28ab767d19f02127547d2652be11f01650c0f9b2a1b3a13d2d2d523cd58d53208ca20
- SSDEEP
  
  12288:UF+tM6XshMhiEPV8dltumwktXEaUfRLN7ku4xAYuIbm6YvKKypnweFcqFXeN2wq:O/6XqMciFypnwscqReN2D
Score

10^/10

emotet epoch5 banker trojan
- Emotet
  Emotet is a trojan that is primarily spread through spam emails.
  trojan banker emotet
behavioral1

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks

static1

behavioral1

emotetepoch5bankertrojan