emotet

General

Target

d4dcf7d77d96d1b7b319d9ddefa167ca_JaffaCakes118
Size

288KB
Sample

240908-vp2naszenh
MD5

d4dcf7d77d96d1b7b319d9ddefa167ca
SHA1

df343fe38ed120c1141090067ecbbded04b44ba3
SHA256

c865d531ab60830721b80a969f1f2be28b1b3f63575b09faf8d80ab61394149e
SHA512

9fe5d034900d7deef61ff66c20ac45ac1307557f44ffedbaa5019b320d5fd404754b6203fed8223b9491d71964750ec3396ffe48f550982a39ad40a62f0c00ca
SSDEEP

6144:RIOp7edGdGg5e4s/FJp4E/GvtVjPJC3lWWXq7f3he6WXEUBmcTZmZ7CTNu:Ws7edG0g5e4K7p4vXPQ/q7yEUwkZmZ7X

Score

10^/10

Malware Config

Extracted

Family

emotet

Botnet

Epoch1

C2

189.189.56.216:443

76.69.29.42:80

51.255.165.160:8080

45.56.79.249:443

163.172.40.218:7080

89.188.124.145:443

212.71.237.140:8080

154.120.227.206:8080

190.146.131.105:8080

45.79.95.107:443

181.36.42.205:443

139.5.237.27:443

46.41.151.103:8080

77.245.101.134:8080

190.182.161.7:8080

201.190.133.235:8080

68.183.190.199:8080

69.163.33.84:8080

109.169.86.13:8080

190.96.118.15:443

rsa_pubkey.plain

Targets

- Target
  
  d4dcf7d77d96d1b7b319d9ddefa167ca_JaffaCakes118
- Size
  
  288KB
- MD5
  
  d4dcf7d77d96d1b7b319d9ddefa167ca
- SHA1
  
  df343fe38ed120c1141090067ecbbded04b44ba3
- SHA256
  
  c865d531ab60830721b80a969f1f2be28b1b3f63575b09faf8d80ab61394149e
- SHA512
  
  9fe5d034900d7deef61ff66c20ac45ac1307557f44ffedbaa5019b320d5fd404754b6203fed8223b9491d71964750ec3396ffe48f550982a39ad40a62f0c00ca
- SSDEEP
  
  6144:RIOp7edGdGg5e4s/FJp4E/GvtVjPJC3lWWXq7f3he6WXEUBmcTZmZ7CTNu:Ws7edG0g5e4K7p4vXPQ/q7yEUwkZmZ7X
Score

10^/10

emotet epoch1 banker discovery trojan
- Emotet
  Emotet is a trojan that is primarily spread through spam emails.
  trojan banker emotet
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

1

T1082

System Location Discovery

1

T1614

System Language Discovery

1

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Extracted

Targets

Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks

static1

behavioral1

behavioral2