emotet

General

Target

7678f9ad67b23cd0d6387da00f037aed3f43b5baaafacfd7d760be8c67ccb741
Size

550KB
Sample

241120-267dfavfma
MD5

5623ef736ed3b5812813f5a09cf83eae
SHA1

1a2041b7aef10b34bd60d2998f4c818075360ec1
SHA256

7678f9ad67b23cd0d6387da00f037aed3f43b5baaafacfd7d760be8c67ccb741
SHA512

35b528055e3035957b55f93affb767d54bbba80375bcd84e8bfade22bfe508d0637f688d0158ccdfac8b3b9999a106ce86007edf41bee44f96cafe0d92939908
SSDEEP

12288:F3MzbACOHXbGSZmpTgtUt/t1tJtE6eb2B2aDj:FOsCOHzmpTLrBBn

Score

10^/10

Malware Config

Extracted

Family

emotet

Botnet

Epoch3

C2

179.15.102.2:80

91.121.200.35:8080

159.203.16.11:8080

188.226.165.170:8080

78.90.78.210:80

181.59.59.54:80

143.95.101.72:8080

61.118.67.173:80

113.203.238.130:80

109.99.146.210:8080

2.58.16.86:8080

50.116.78.109:8080

188.166.220.180:7080

175.103.38.146:80

198.20.228.9:8080

5.2.246.108:80

115.79.195.246:80

187.193.221.143:80

41.76.213.144:8080

180.148.4.130:8080

rsa_pubkey.plain

Targets

- Target
  
  7678f9ad67b23cd0d6387da00f037aed3f43b5baaafacfd7d760be8c67ccb741
- Size
  
  550KB
- MD5
  
  5623ef736ed3b5812813f5a09cf83eae
- SHA1
  
  1a2041b7aef10b34bd60d2998f4c818075360ec1
- SHA256
  
  7678f9ad67b23cd0d6387da00f037aed3f43b5baaafacfd7d760be8c67ccb741
- SHA512
  
  35b528055e3035957b55f93affb767d54bbba80375bcd84e8bfade22bfe508d0637f688d0158ccdfac8b3b9999a106ce86007edf41bee44f96cafe0d92939908
- SSDEEP
  
  12288:F3MzbACOHXbGSZmpTgtUt/t1tJtE6eb2B2aDj:FOsCOHzmpTLrBBn
Score

10^/10

emotet epoch3 banker discovery trojan
- Emotet
  Emotet is a trojan that is primarily spread through spam emails.
  trojan banker emotet
- Emotet family
  emotet
- Emotet payload
  Detects Emotet payload in memory.
  trojan banker
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

1

T1614

System Language Discovery

1

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Extracted

Targets

Emotet family

Emotet payload

MITRE ATT&CK Enterprise v15

Tasks

static1

behavioral1

behavioral2