emotet

General

Target

e4373146afecedbc27aac84accdf5b20_JaffaCakes118
Size

57KB
Sample

240916-hh2nhatejd
MD5

e4373146afecedbc27aac84accdf5b20
SHA1

58366d1a8be16d30e4c1bb97c04bd587b33521dd
SHA256

19e998ae7e9f9d29ce712958e3b695c587bdde77242cde384bf61a2ec6cf3a26
SHA512

722418c39f21d1ffc958279fa684ea1367dfa9275762b77331d1aa8982d1b08fc8ffb5bbc40e7cdd606981dc70e73285952532d7e913567f5977ed616b7a2376
SSDEEP

1536:WlMBmWKs7rvtEkPb1ikM8j2eQUZD7fiumtCZtPX9UQnY6SFEatA:wAKsHtEkDTjXX3iec0WEatA

Score

10^/10

Malware Config

Extracted

Family

emotet

Botnet

Epoch2

C2

186.4.172.5:443

186.4.172.5:8080

85.25.255.207:8080

185.94.252.13:443

94.177.216.217:8080

124.240.198.66:80

189.209.217.49:80

200.113.106.18:465

200.113.106.18:21

185.187.198.15:80

159.65.25.128:8080

87.106.136.232:8080

83.136.245.190:8080

212.71.234.16:8080

103.39.131.88:80

169.239.182.217:8080

136.243.177.26:8080

167.71.10.37:8080

201.250.54.115:50000

190.226.44.20:21

rsa_pubkey.plain

Targets

- Target
  
  e4373146afecedbc27aac84accdf5b20_JaffaCakes118
- Size
  
  57KB
- MD5
  
  e4373146afecedbc27aac84accdf5b20
- SHA1
  
  58366d1a8be16d30e4c1bb97c04bd587b33521dd
- SHA256
  
  19e998ae7e9f9d29ce712958e3b695c587bdde77242cde384bf61a2ec6cf3a26
- SHA512
  
  722418c39f21d1ffc958279fa684ea1367dfa9275762b77331d1aa8982d1b08fc8ffb5bbc40e7cdd606981dc70e73285952532d7e913567f5977ed616b7a2376
- SSDEEP
  
  1536:WlMBmWKs7rvtEkPb1ikM8j2eQUZD7fiumtCZtPX9UQnY6SFEatA:wAKsHtEkDTjXX3iec0WEatA
Score

10^/10

emotet epoch2 banker discovery trojan
- Emotet
  Emotet is a trojan that is primarily spread through spam emails.
  trojan banker emotet
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

1

T1082

System Location Discovery

1

T1614

System Language Discovery

1

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Extracted

Targets

Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks

static1

behavioral1

behavioral2