emotet

General

Target

d4e3b4b62e2683019343b2660f81e241_JaffaCakes118
Size

396KB
Sample

240908-v2kwbayarn
MD5

d4e3b4b62e2683019343b2660f81e241
SHA1

404a0c4617991d8cffe4ea48f62e00474fffeb74
SHA256

b60dc4739bc57e624f54393667fdbaedf89aebab1a8ff05be24d64b6c73c6184
SHA512

eccf5956a59697c030a9ba36995215110de042e96b51330f23bb86f6904dc14fa19ec61ae24218c1b56303e3e38d684ed11f4c7031d7ee9b212fab15a59acc9d
SSDEEP

6144:w7TJboTAz/HCykoK7H5OaVoo2A5F8HmtILrpeoNpfkAEVP5m:ccqCzj5OaB2A5gfY+FAP

Score

10^/10

Malware Config

Extracted

Family

emotet

Botnet

Epoch1

C2

80.240.141.141:7080

185.187.198.10:8080

178.249.187.151:8080

151.80.142.33:80

183.82.97.25:80

62.75.160.178:8080

190.230.60.129:8080

119.92.51.40:8080

217.199.175.216:8080

190.104.253.234:990

181.36.42.205:443

181.29.101.13:8080

178.79.163.131:8080

77.245.101.134:8080

80.85.87.122:8080

123.168.4.66:22

79.143.182.254:8080

91.83.93.124:7080

200.57.102.71:8443

88.250.223.190:8080

rsa_pubkey.plain

Targets

- Target
  
  d4e3b4b62e2683019343b2660f81e241_JaffaCakes118
- Size
  
  396KB
- MD5
  
  d4e3b4b62e2683019343b2660f81e241
- SHA1
  
  404a0c4617991d8cffe4ea48f62e00474fffeb74
- SHA256
  
  b60dc4739bc57e624f54393667fdbaedf89aebab1a8ff05be24d64b6c73c6184
- SHA512
  
  eccf5956a59697c030a9ba36995215110de042e96b51330f23bb86f6904dc14fa19ec61ae24218c1b56303e3e38d684ed11f4c7031d7ee9b212fab15a59acc9d
- SSDEEP
  
  6144:w7TJboTAz/HCykoK7H5OaVoo2A5F8HmtILrpeoNpfkAEVP5m:ccqCzj5OaB2A5gfY+FAP
Score

10^/10

emotet epoch1 banker discovery trojan
- Emotet
  Emotet is a trojan that is primarily spread through spam emails.
  trojan banker emotet
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

1

T1082

System Location Discovery

1

T1614

System Language Discovery

1

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Extracted

Targets

Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks

static1

behavioral1

behavioral2