emotet

General

Target

e57f58ee01bbb9732f93cab29ff92897a1f7781d461cab4d0fe57953db1be9cd
Size

896KB
Sample

241120-26f69awejn
MD5

85c9c85d2de16a5172456caecc9f720a
SHA1

bf24ca7ed68ed62f97dbdf9e23a639dfab3a4883
SHA256

e57f58ee01bbb9732f93cab29ff92897a1f7781d461cab4d0fe57953db1be9cd
SHA512

e286cff5843fbdfd6c0c09c07251fb8e7255737e014ab334d9bc16fc1da67de977471fccc5f85c9454682082dfb6a1b9fea6e1a1d6e731311c9019e31f019cf1
SSDEEP

12288:VZlyqwEmkmauSVd2R3R0EcX0euXBFsvsU3z44nbGc:Xm6whk90BLyZn

Score

10^/10

Malware Config

Extracted

Family

emotet

Botnet

Epoch3

C2

71.57.180.213:80

185.86.148.68:443

168.235.82.183:8080

181.113.229.139:443

181.134.9.162:80

217.199.160.224:8080

105.209.235.113:8080

216.75.37.196:8080

97.104.107.190:80

203.153.216.182:7080

107.161.30.122:8080

41.106.96.12:80

202.5.47.71:80

201.235.10.215:80

105.213.67.88:80

115.79.195.246:80

179.5.118.12:80

212.112.113.235:80

139.59.12.63:8080

177.37.81.212:443

rsa_pubkey.plain

Targets

- Target
  
  e57f58ee01bbb9732f93cab29ff92897a1f7781d461cab4d0fe57953db1be9cd
- Size
  
  896KB
- MD5
  
  85c9c85d2de16a5172456caecc9f720a
- SHA1
  
  bf24ca7ed68ed62f97dbdf9e23a639dfab3a4883
- SHA256
  
  e57f58ee01bbb9732f93cab29ff92897a1f7781d461cab4d0fe57953db1be9cd
- SHA512
  
  e286cff5843fbdfd6c0c09c07251fb8e7255737e014ab334d9bc16fc1da67de977471fccc5f85c9454682082dfb6a1b9fea6e1a1d6e731311c9019e31f019cf1
- SSDEEP
  
  12288:VZlyqwEmkmauSVd2R3R0EcX0euXBFsvsU3z44nbGc:Xm6whk90BLyZn
Score

10^/10

emotet epoch3 banker discovery trojan
- Emotet
  Emotet is a trojan that is primarily spread through spam emails.
  trojan banker emotet
- Emotet family
  emotet
- Emotet payload
  Detects Emotet payload in memory.
  trojan banker
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

1

T1614

System Language Discovery

1

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Extracted

Targets

Emotet family

Emotet payload

MITRE ATT&CK Enterprise v15

Tasks

static1

behavioral1

behavioral2