emotet

General

Target

866211d72d0a63995ec1ab75333bdc10f00f32bbb5cdd2d3b32d11960dbcd2bb
Size

368KB
Sample

241120-22dkkavenf
MD5

394fe5d681918ca17064530270c34471
SHA1

09cc069dce40e64a0495241d596bfcfc8d55ea4b
SHA256

866211d72d0a63995ec1ab75333bdc10f00f32bbb5cdd2d3b32d11960dbcd2bb
SHA512

be0f9316c8ddf63e6e6dcf13b68a6c386e23026d86c5084f88835002df32409862f923abc7aa6ab30ba4bdf8c8d6263fc50d7d1592097dbdc01ac7119bdb871d
SSDEEP

6144:AozjUrx4KVHa9eUfTLHygDVjfML+YSetAAlyb57P/z6GcNdJ8lGn:AoiHV8zpYSeblyRnzpcNdCM

Score

10^/10

Malware Config

Extracted

Family

emotet

Botnet

Epoch3

C2

78.90.78.210:80

188.226.165.170:8080

188.40.170.197:80

51.38.50.144:8080

120.51.34.254:80

85.246.78.192:80

139.59.12.63:8080

46.105.131.68:8080

5.2.246.108:80

60.108.128.186:80

190.55.186.229:80

47.154.85.229:80

188.80.27.54:80

115.79.59.157:80

91.75.75.46:80

119.92.77.17:80

109.13.179.195:80

190.151.5.131:443

5.79.70.250:8080

175.103.38.146:80

rsa_pubkey.plain

Targets

- Target
  
  866211d72d0a63995ec1ab75333bdc10f00f32bbb5cdd2d3b32d11960dbcd2bb
- Size
  
  368KB
- MD5
  
  394fe5d681918ca17064530270c34471
- SHA1
  
  09cc069dce40e64a0495241d596bfcfc8d55ea4b
- SHA256
  
  866211d72d0a63995ec1ab75333bdc10f00f32bbb5cdd2d3b32d11960dbcd2bb
- SHA512
  
  be0f9316c8ddf63e6e6dcf13b68a6c386e23026d86c5084f88835002df32409862f923abc7aa6ab30ba4bdf8c8d6263fc50d7d1592097dbdc01ac7119bdb871d
- SSDEEP
  
  6144:AozjUrx4KVHa9eUfTLHygDVjfML+YSetAAlyb57P/z6GcNdJ8lGn:AoiHV8zpYSeblyRnzpcNdCM
Score

10^/10

emotet epoch3 banker discovery trojan
- Emotet
  Emotet is a trojan that is primarily spread through spam emails.
  trojan banker emotet
- Emotet family
  emotet
- Emotet payload
  Detects Emotet payload in memory.
  trojan banker
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

1

T1614

System Language Discovery

1

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Extracted

Targets

Emotet family

Emotet payload

MITRE ATT&CK Enterprise v15

Tasks

static1

behavioral1

behavioral2