emotet

General

Target

5de15f2a06e9fb2727c3a351164a8288_JaffaCakes118
Size

195KB
Sample

240520-jds18sae31
MD5

5de15f2a06e9fb2727c3a351164a8288
SHA1

cdf63bbe5f06e7bd663b59ee9c69c3d51666db12
SHA256

cd04dc2e3ab620a174d395f2df44f5d3568762e86f1af9f00e4a27e144b2d975
SHA512

3283758e7c22726f123da8adf08ef7f920463fc69f32492c0e11a264b89f45cc49386453d8a9b3c5fcdeee46e4a6e1843c7b6819922d303eda2b3176a33f2042
SSDEEP

3072:bkgyzbBp52B0ym2O7kXi42TFI57Z2kgn9UnJcyBaoqBuBhh6U74AZeH4vwt3:b9Ytp52B0Taif+0UnfaoqBihh175Fa

Score

10^/10

Malware Config

Extracted

Family

emotet

Botnet

Epoch1

C2

189.173.113.67:443

200.123.101.90:80

170.130.31.177:8080

51.255.165.160:8080

45.56.79.249:443

185.86.148.222:8080

190.4.50.26:80

187.188.166.192:80

94.177.183.28:8080

201.213.32.59:80

76.69.29.42:80

190.96.118.15:443

81.213.215.216:50000

80.85.87.122:8080

186.1.41.111:443

183.82.97.25:80

220.241.38.226:50000

14.160.93.230:80

200.58.83.179:80

138.68.106.4:7080

rsa_pubkey.plain

Targets

- Target
  
  5de15f2a06e9fb2727c3a351164a8288_JaffaCakes118
- Size
  
  195KB
- MD5
  
  5de15f2a06e9fb2727c3a351164a8288
- SHA1
  
  cdf63bbe5f06e7bd663b59ee9c69c3d51666db12
- SHA256
  
  cd04dc2e3ab620a174d395f2df44f5d3568762e86f1af9f00e4a27e144b2d975
- SHA512
  
  3283758e7c22726f123da8adf08ef7f920463fc69f32492c0e11a264b89f45cc49386453d8a9b3c5fcdeee46e4a6e1843c7b6819922d303eda2b3176a33f2042
- SSDEEP
  
  3072:bkgyzbBp52B0ym2O7kXi42TFI57Z2kgn9UnJcyBaoqBuBhh6U74AZeH4vwt3:b9Ytp52B0Taif+0UnfaoqBihh175Fa
Score

10^/10

emotet epoch1 banker trojan
- Emotet
  Emotet is a trojan that is primarily spread through spam emails.
  trojan banker emotet
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

1

T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks

Sharing

General

Malware Config

Extracted

Targets

Drops file in System32 directory

MITRE ATT&CK Matrix ATT&CK v13

Tasks

static1

behavioral1

behavioral2