emotet

General

Target

a7302668da636e83cbe196a2bfd1fc63870d403e4c869a5f58c50cfe5271d000
Size

300KB
Sample

241120-23y8nawdql
MD5

47565f9bc541a1f8fd37ef7f8aa71654
SHA1

c2ebff78d94d7990460bc9e1123d458477e18291
SHA256

a7302668da636e83cbe196a2bfd1fc63870d403e4c869a5f58c50cfe5271d000
SHA512

bcf15925103cfedf74a2cc8481cc8355499de5336a53690654f1a37d1d346e2ae2f6ad209f7a0168f86a0fe77096ec9527800f1173523c68c6129d652811c36f
SSDEEP

6144:a5Xl+vaBQXt8t3nv6oSDM4VyDgPJAEU4kcaV4YvEFe7kec:a5Xl+vaBQd8t3vADBVyk2EVe+e7

Score

10^/10

Malware Config

Extracted

Family

emotet

Botnet

Epoch1

C2

177.73.0.98:443

185.94.252.13:443

5.196.35.138:7080

191.182.6.118:80

2.47.112.152:80

77.90.136.129:8080

144.139.91.187:443

192.241.146.84:8080

186.70.127.199:8090

149.62.173.247:8080

181.167.96.215:80

50.28.51.143:8080

177.66.190.130:80

111.67.12.221:8080

45.161.242.102:80

177.144.135.2:80

191.99.160.58:80

192.241.143.52:8080

80.249.176.206:80

190.17.195.202:80

rsa_pubkey.plain

Targets

- Target
  
  a7302668da636e83cbe196a2bfd1fc63870d403e4c869a5f58c50cfe5271d000
- Size
  
  300KB
- MD5
  
  47565f9bc541a1f8fd37ef7f8aa71654
- SHA1
  
  c2ebff78d94d7990460bc9e1123d458477e18291
- SHA256
  
  a7302668da636e83cbe196a2bfd1fc63870d403e4c869a5f58c50cfe5271d000
- SHA512
  
  bcf15925103cfedf74a2cc8481cc8355499de5336a53690654f1a37d1d346e2ae2f6ad209f7a0168f86a0fe77096ec9527800f1173523c68c6129d652811c36f
- SSDEEP
  
  6144:a5Xl+vaBQXt8t3nv6oSDM4VyDgPJAEU4kcaV4YvEFe7kec:a5Xl+vaBQd8t3vADBVyk2EVe+e7
Score

10^/10

emotet epoch1 banker discovery trojan
- Emotet
  Emotet is a trojan that is primarily spread through spam emails.
  trojan banker emotet
- Emotet family
  emotet
- Emotet payload
  Detects Emotet payload in memory.
  trojan banker
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

1

T1614

System Language Discovery

1

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Extracted

Targets

Emotet family

Emotet payload

MITRE ATT&CK Enterprise v15

Tasks

static1

behavioral1

behavioral2