emotet

General

Target

58642c4814b0b09123476effaa8ee8cc_JaffaCakes118
Size

186KB
Sample

240519-ea5teagg4y
MD5

58642c4814b0b09123476effaa8ee8cc
SHA1

bf3823284746234191f53487260795664d590631
SHA256

4dad63c114751da24b26574648840bac6319573ffbef2ab909b3acc354d6d4b8
SHA512

5e52615ad72de72b385253337649c5b42d342e9c3951e67439ecec778ac49c846965739750cafcce1b92f76955357aec55b584698383d6927f6b766fe889170a
SSDEEP

3072:PQczzbBp52B0om2O7kXi42TzI57Z2PTUnDrFIwJ2d6n6du8gjxPNiJa:PzXtp52B0Vaif0QUn6wJ3ncngjEa

Score

10^/10

Malware Config

Extracted

Family

emotet

Botnet

Epoch3

C2

189.252.102.40:8080

186.109.28.142:80

211.110.229.161:443

193.34.144.138:8080

74.208.173.91:8080

144.76.62.10:8080

216.75.37.196:8080

201.196.15.79:990

94.177.253.126:80

124.150.175.133:80

216.70.88.55:8080

5.189.148.98:8080

186.18.224.149:80

91.109.5.28:8080

212.112.113.235:80

142.93.87.198:8080

190.128.222.14:80

157.7.164.178:8081

113.52.135.33:7080

95.216.212.157:8080

rsa_pubkey.plain

Targets

- Target
  
  58642c4814b0b09123476effaa8ee8cc_JaffaCakes118
- Size
  
  186KB
- MD5
  
  58642c4814b0b09123476effaa8ee8cc
- SHA1
  
  bf3823284746234191f53487260795664d590631
- SHA256
  
  4dad63c114751da24b26574648840bac6319573ffbef2ab909b3acc354d6d4b8
- SHA512
  
  5e52615ad72de72b385253337649c5b42d342e9c3951e67439ecec778ac49c846965739750cafcce1b92f76955357aec55b584698383d6927f6b766fe889170a
- SSDEEP
  
  3072:PQczzbBp52B0om2O7kXi42TzI57Z2PTUnDrFIwJ2d6n6du8gjxPNiJa:PzXtp52B0Vaif0QUn6wJ3ncngjEa
Score

10^/10

emotet epoch3 banker trojan
- Emotet
  Emotet is a trojan that is primarily spread through spam emails.
  trojan banker emotet
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

1

T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks

Sharing

General

Malware Config

Extracted

Targets

Drops file in System32 directory

MITRE ATT&CK Matrix ATT&CK v13

Tasks

static1

behavioral1

behavioral2