emotet

General

Target

87ba201306f7278942243210f607cbaaa54ee015f412b40c36d7177f0b126dd2
Size

684KB
Sample

240226-1e17nsge79
MD5

99eb89aaa5e81d5270a5c04fbb580481
SHA1

a430b4d9067a9e0704bc13c399146a611638f612
SHA256

87ba201306f7278942243210f607cbaaa54ee015f412b40c36d7177f0b126dd2
SHA512

6ffeda782de0e91710a42209fe8904f3b5d1c893456f87e4af1070479385b41323f7bdae2ae86e09345eca00ab8cc266bb8fe38c3370365b6348b4839142f772
SSDEEP

6144:F/aZgRXcZdinj5y1baFLk5Dw2jb7t3mJXzQbaCIXilmj2cO8h35jnL/nvYwFaRVb:BamncoLAbcduxmSc/Jf/ngwFGMD0sg

Score

10^/10

Malware Config

Extracted

Family

emotet

Botnet

Epoch5

C2

51.75.33.122:443

186.250.48.5:80

168.119.39.118:443

207.148.81.119:8080

194.9.172.107:8080

139.196.72.155:8080

78.47.204.80:443

159.69.237.188:443

45.71.195.104:8080

54.37.106.167:8080

185.168.130.138:443

37.44.244.177:8080

185.184.25.78:8080

185.148.168.15:8080

128.199.192.135:8080

37.59.209.141:8080

103.41.204.169:8080

185.148.168.220:8080

103.42.58.120:7080

78.46.73.125:443

eck1.plain

ecs1.plain

Targets

- Target
  
  87ba201306f7278942243210f607cbaaa54ee015f412b40c36d7177f0b126dd2
- Size
  
  684KB
- MD5
  
  99eb89aaa5e81d5270a5c04fbb580481
- SHA1
  
  a430b4d9067a9e0704bc13c399146a611638f612
- SHA256
  
  87ba201306f7278942243210f607cbaaa54ee015f412b40c36d7177f0b126dd2
- SHA512
  
  6ffeda782de0e91710a42209fe8904f3b5d1c893456f87e4af1070479385b41323f7bdae2ae86e09345eca00ab8cc266bb8fe38c3370365b6348b4839142f772
- SSDEEP
  
  6144:F/aZgRXcZdinj5y1baFLk5Dw2jb7t3mJXzQbaCIXilmj2cO8h35jnL/nvYwFaRVb:BamncoLAbcduxmSc/Jf/ngwFGMD0sg
Score

10^/10

emotet epoch5 banker trojan
- Emotet
  Emotet is a trojan that is primarily spread through spam emails.
  trojan banker emotet
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

Sharing

General

Malware Config

Extracted

Targets

Loads dropped DLL

Drops file in System32 directory

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

behavioral2