emotet

General

Target

de9f4e44fd945935ca11ea07c072b7c9_JaffaCakes118
Size

300KB
Sample

240913-wmkgnszfql
MD5

de9f4e44fd945935ca11ea07c072b7c9
SHA1

d9816f5003b54df35a564f30970ccba3f2c1599b
SHA256

00d9a7772e8ce68e1139bc4b107758b1cca3c83a8e5df831e720f8172ee440e0
SHA512

cc10cb1aedcafd6d99f37ef0ae0aaebbb7e9ce671d1742e3d1e783aff2ee874478b8a3de39ffa5844149b8fb175d9e6af04ef0681319320eecbaee5aed756839
SSDEEP

6144:WJfdWHSpYXV8t3tvQQIncd+1iE1JU7nOf3+eOIOaa/6YfIbYhYs:WJfdWHSpYF8t3d8nnlkOGeveu4Y

Score

10^/10

Malware Config

Extracted

Family

emotet

Botnet

Epoch2

C2

24.234.133.205:80

212.51.142.238:8080

37.187.72.193:8080

139.59.60.244:8080

168.235.67.138:7080

173.91.22.41:80

71.208.216.10:80

190.55.181.54:443

78.189.165.52:8080

104.131.44.150:8080

87.106.136.232:8080

203.153.216.189:7080

62.75.141.82:80

124.45.106.173:443

46.105.131.87:80

87.106.139.101:8080

50.116.86.205:8080

78.24.219.147:8080

47.153.182.47:80

162.154.38.103:80

rsa_pubkey.plain

Targets

- Target
  
  de9f4e44fd945935ca11ea07c072b7c9_JaffaCakes118
- Size
  
  300KB
- MD5
  
  de9f4e44fd945935ca11ea07c072b7c9
- SHA1
  
  d9816f5003b54df35a564f30970ccba3f2c1599b
- SHA256
  
  00d9a7772e8ce68e1139bc4b107758b1cca3c83a8e5df831e720f8172ee440e0
- SHA512
  
  cc10cb1aedcafd6d99f37ef0ae0aaebbb7e9ce671d1742e3d1e783aff2ee874478b8a3de39ffa5844149b8fb175d9e6af04ef0681319320eecbaee5aed756839
- SSDEEP
  
  6144:WJfdWHSpYXV8t3tvQQIncd+1iE1JU7nOf3+eOIOaa/6YfIbYhYs:WJfdWHSpYF8t3d8nnlkOGeveu4Y
Score

10^/10

emotet epoch2 banker discovery trojan
- Emotet
  Emotet is a trojan that is primarily spread through spam emails.
  trojan banker emotet
- Emotet payload
  Detects Emotet payload in memory.
  trojan banker
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

1

T1614

System Language Discovery

1

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Extracted

Targets

Emotet payload

MITRE ATT&CK Enterprise v15

Tasks

static1

behavioral1

behavioral2