emotet

General

Target

ff04e8b4675bf774fc7c0fd0c67a20d66c1a295b7cec1a46ca25487cc48e8714
Size

688KB
Sample

240906-hqq7qssfjg
MD5

04d9fea323500e6c2f18cdfd3b8fcdeb
SHA1

6c25195f05132bac351fcad3debe272d9ad2ee97
SHA256

ff04e8b4675bf774fc7c0fd0c67a20d66c1a295b7cec1a46ca25487cc48e8714
SHA512

ccb07fa13b52052aff109c05be92ae718adf13f24b85316451c156f7884d744249608f5fa2b7ea34de816199e8d64891ced60087d2f6feb09ab372b59905620f
SSDEEP

12288:KFxGsTPy4BHT4Sj1zfpf7ABqDLkWynCsZ:obPy44Y1tf7VDLkNnh

Score

10^/10

Malware Config

Extracted

Family

emotet

Botnet

Epoch4

C2

45.76.1.145:443

217.182.25.250:8080

119.193.124.41:7080

192.99.251.50:443

146.59.226.45:443

173.212.193.249:8080

207.38.84.195:8080

45.118.135.203:7080

31.24.158.56:8080

209.126.98.206:8080

212.237.17.99:8080

216.158.226.206:443

50.30.40.196:8080

82.165.152.127:8080

159.8.59.82:8080

107.182.225.142:8080

110.232.117.186:8080

72.15.201.15:8080

5.9.116.246:8080

79.172.212.216:8080

eck1.plain

ecs1.plain

Targets

- Target
  
  ff04e8b4675bf774fc7c0fd0c67a20d66c1a295b7cec1a46ca25487cc48e8714
- Size
  
  688KB
- MD5
  
  04d9fea323500e6c2f18cdfd3b8fcdeb
- SHA1
  
  6c25195f05132bac351fcad3debe272d9ad2ee97
- SHA256
  
  ff04e8b4675bf774fc7c0fd0c67a20d66c1a295b7cec1a46ca25487cc48e8714
- SHA512
  
  ccb07fa13b52052aff109c05be92ae718adf13f24b85316451c156f7884d744249608f5fa2b7ea34de816199e8d64891ced60087d2f6feb09ab372b59905620f
- SSDEEP
  
  12288:KFxGsTPy4BHT4Sj1zfpf7ABqDLkWynCsZ:obPy44Y1tf7VDLkNnh
Score

10^/10

emotet epoch4 banker discovery trojan
- Emotet
  Emotet is a trojan that is primarily spread through spam emails.
  trojan banker emotet
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

1

T1614

System Language Discovery

1

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Extracted

Targets

Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks

static1

behavioral1

behavioral2