emotet

General

Target

11afb7a82dadd768409c062da31e94500f8bd75ee86c5ed30a0024e1b41fec3d
Size

286KB
Sample

241017-1fdg1axfrf
MD5

34db6d415ea0aaa3baa65119fcab1191
SHA1

4ae996a072239f0be62bd4be8a5982a663de2334
SHA256

11afb7a82dadd768409c062da31e94500f8bd75ee86c5ed30a0024e1b41fec3d
SHA512

9ef99150a53226cf4b23ee38c125e2abea2fee29d400d5704d78969fa234e2d2a0d36169c1bba2fa580aec4c63591836110290ff20c8af4dda12f9743a8f1b66
SSDEEP

6144:IoxTXpdoTImbZYTYg4//zFciTHjGYaEckMG76MJ:1PdoTImbZ5g4/h4KcAHJ

Score

10^/10

Malware Config

Extracted

Family

emotet

Botnet

Epoch2

C2

74.120.55.163:80

176.10.250.88:8080

96.8.113.4:8080

137.59.187.107:8080

74.208.45.104:8080

104.131.11.150:443

110.145.77.103:80

87.106.136.232:8080

114.146.222.200:80

37.187.72.193:8080

181.230.116.163:80

70.167.215.250:8080

103.86.49.11:8080

201.173.217.124:443

109.74.5.95:8080

95.213.236.64:8080

5.39.91.110:7080

78.24.219.147:8080

81.2.235.111:8080

183.101.175.193:80

rsa_pubkey.plain

Targets

- Target
  
  11afb7a82dadd768409c062da31e94500f8bd75ee86c5ed30a0024e1b41fec3d
- Size
  
  286KB
- MD5
  
  34db6d415ea0aaa3baa65119fcab1191
- SHA1
  
  4ae996a072239f0be62bd4be8a5982a663de2334
- SHA256
  
  11afb7a82dadd768409c062da31e94500f8bd75ee86c5ed30a0024e1b41fec3d
- SHA512
  
  9ef99150a53226cf4b23ee38c125e2abea2fee29d400d5704d78969fa234e2d2a0d36169c1bba2fa580aec4c63591836110290ff20c8af4dda12f9743a8f1b66
- SSDEEP
  
  6144:IoxTXpdoTImbZYTYg4//zFciTHjGYaEckMG76MJ:1PdoTImbZ5g4/h4KcAHJ
Score

10^/10

emotet epoch2 banker discovery trojan
- Emotet
  Emotet is a trojan that is primarily spread through spam emails.
  trojan banker emotet
- Emotet payload
  Detects Emotet payload in memory.
  trojan banker
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

1

T1614

System Language Discovery

1

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Extracted

Targets

Emotet payload

MITRE ATT&CK Enterprise v15

Tasks

static1

behavioral1

behavioral2