emotet

General

Target

f902561545f078bc7070c5603927a680_JaffaCakes118
Size

392KB
Sample

240926-xj2r8asejl
MD5

f902561545f078bc7070c5603927a680
SHA1

8c38e04d5ba6fa339f008a245b7abc12b80d6565
SHA256

c4b54b380d46d557a956845974bb641de683b1d0a4f82a77023427d736a1e478
SHA512

596fdfa58b21cf17d02361b2a00dd31ae285e1c220d469acd016baa36c5099c3643a77575d7da61fd5eb340cab1795ec99482d01d3700bf1c4632409456d2239
SSDEEP

6144:vQwl8GGD02Q98eFRDtelT6LXdooCXV5DLvmgB76/Sj2tcm5dqa5/sZ:vr8XD0DxDtyQXS5uPUiz5r5

Score

10^/10

Malware Config

Extracted

Family

emotet

Botnet

Epoch3

C2

50.63.13.135:8080

80.211.32.88:8080

222.239.249.166:443

54.38.94.197:8080

78.46.87.133:8080

191.100.24.201:50000

200.71.112.158:53

212.129.14.27:8080

190.189.79.73:80

176.58.93.123:80

113.52.135.33:7080

161.18.233.114:80

46.17.6.116:8080

192.241.220.183:8080

162.144.46.90:8080

95.216.207.86:7080

95.216.212.157:8080

217.26.163.82:7080

50.116.78.109:8080

142.93.87.198:8080

rsa_pubkey.plain

Targets

- Target
  
  f902561545f078bc7070c5603927a680_JaffaCakes118
- Size
  
  392KB
- MD5
  
  f902561545f078bc7070c5603927a680
- SHA1
  
  8c38e04d5ba6fa339f008a245b7abc12b80d6565
- SHA256
  
  c4b54b380d46d557a956845974bb641de683b1d0a4f82a77023427d736a1e478
- SHA512
  
  596fdfa58b21cf17d02361b2a00dd31ae285e1c220d469acd016baa36c5099c3643a77575d7da61fd5eb340cab1795ec99482d01d3700bf1c4632409456d2239
- SSDEEP
  
  6144:vQwl8GGD02Q98eFRDtelT6LXdooCXV5DLvmgB76/Sj2tcm5dqa5/sZ:vr8XD0DxDtyQXS5uPUiz5r5
Score

10^/10

emotet epoch3 banker discovery trojan
- Emotet
  Emotet is a trojan that is primarily spread through spam emails.
  trojan banker emotet
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

1

T1082

System Location Discovery

1

T1614

System Language Discovery

1

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Extracted

Targets

Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks

static1

behavioral1

behavioral2