emotet

General

Target

e91f2a450e3b3ed567ba00e083ee39f4_JaffaCakes118
Size

740KB
Sample

240918-pqgrma1bja
MD5

e91f2a450e3b3ed567ba00e083ee39f4
SHA1

c134e77bd266a63302f947511dbb626238b9785f
SHA256

0766b08a037506e308e53f338f50dd181262b849cfcc7561aa1c412814852a8f
SHA512

804b1206cf6ae669a105ff3c141dfa8f95eae1e1f506114f4c9ba36273e84cf9022ab3689e71b28d5462eda0ef41368c8e513dfad0be08fe83bd4fef42c96a2a
SSDEEP

6144:yRRGn2jZ7yH9n+TpacP8iBahODMedVgx71L7qMLHEesVFjHpGGtlV9slgZt48jQu:C+tOacfBKOjdVc1PeHB58Zt6qmyt

Score

10^/10

Malware Config

Extracted

Family

emotet

Botnet

Epoch1

C2

94.67.21.187:8080

181.231.62.54:80

170.130.31.177:8080

51.255.165.160:8080

45.56.79.249:443

200.113.106.18:80

41.75.135.93:7080

87.106.77.40:7080

79.143.182.254:8080

60.52.64.122:80

45.79.95.107:443

51.15.8.192:8080

94.183.71.206:7080

159.203.204.126:8080

62.75.160.178:8080

42.190.4.92:443

149.62.173.247:8080

79.127.57.43:80

91.205.215.57:7080

46.28.111.142:7080

rsa_pubkey.plain

Targets

- Target
  
  e91f2a450e3b3ed567ba00e083ee39f4_JaffaCakes118
- Size
  
  740KB
- MD5
  
  e91f2a450e3b3ed567ba00e083ee39f4
- SHA1
  
  c134e77bd266a63302f947511dbb626238b9785f
- SHA256
  
  0766b08a037506e308e53f338f50dd181262b849cfcc7561aa1c412814852a8f
- SHA512
  
  804b1206cf6ae669a105ff3c141dfa8f95eae1e1f506114f4c9ba36273e84cf9022ab3689e71b28d5462eda0ef41368c8e513dfad0be08fe83bd4fef42c96a2a
- SSDEEP
  
  6144:yRRGn2jZ7yH9n+TpacP8iBahODMedVgx71L7qMLHEesVFjHpGGtlV9slgZt48jQu:C+tOacfBKOjdVc1PeHB58Zt6qmyt
Score

10^/10

emotet epoch1 banker discovery trojan
- Emotet
  Emotet is a trojan that is primarily spread through spam emails.
  trojan banker emotet
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

1

T1082

System Location Discovery

1

T1614

System Language Discovery

1

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Extracted

Targets

Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks

static1

behavioral1

behavioral2