emotet

General

Target

d77db9ed09e971bc851562d4bf670c36fd127488c2ca1057f4ba38a7c214f351
Size

550KB
Sample

241120-2f9qwavhql
MD5

9a22ef2454a984be4e8f03684acdc858
SHA1

7de6f1f978433d8f00bbb6e626e6b5f9027b569d
SHA256

d77db9ed09e971bc851562d4bf670c36fd127488c2ca1057f4ba38a7c214f351
SHA512

740381b4ccb855aef6e89e9827b429471a5e36e71fbe6f16ca7d4ec8596c77da9f0c3bbb5a489c0b0d156473931063dd8dd144d3fc4632d690681c58afcc45ed
SSDEEP

12288:F3MzbACOHXbGSZmpTktUt/t1tJtE6eb2B2aDj:FOsCOHzmpTXrBBn

Score

10^/10

Malware Config

Extracted

Family

emotet

Botnet

Epoch3

C2

179.15.102.2:80

91.121.200.35:8080

159.203.16.11:8080

188.226.165.170:8080

78.90.78.210:80

181.59.59.54:80

143.95.101.72:8080

61.118.67.173:80

113.203.238.130:80

109.99.146.210:8080

2.58.16.86:8080

50.116.78.109:8080

188.166.220.180:7080

175.103.38.146:80

198.20.228.9:8080

5.2.246.108:80

115.79.195.246:80

187.193.221.143:80

41.76.213.144:8080

180.148.4.130:8080

rsa_pubkey.plain

Targets

- Target
  
  d77db9ed09e971bc851562d4bf670c36fd127488c2ca1057f4ba38a7c214f351
- Size
  
  550KB
- MD5
  
  9a22ef2454a984be4e8f03684acdc858
- SHA1
  
  7de6f1f978433d8f00bbb6e626e6b5f9027b569d
- SHA256
  
  d77db9ed09e971bc851562d4bf670c36fd127488c2ca1057f4ba38a7c214f351
- SHA512
  
  740381b4ccb855aef6e89e9827b429471a5e36e71fbe6f16ca7d4ec8596c77da9f0c3bbb5a489c0b0d156473931063dd8dd144d3fc4632d690681c58afcc45ed
- SSDEEP
  
  12288:F3MzbACOHXbGSZmpTktUt/t1tJtE6eb2B2aDj:FOsCOHzmpTXrBBn
Score

10^/10

emotet epoch3 banker discovery trojan
- Emotet
  Emotet is a trojan that is primarily spread through spam emails.
  trojan banker emotet
- Emotet family
  emotet
- Emotet payload
  Detects Emotet payload in memory.
  trojan banker
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

1

T1614

System Language Discovery

1

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Extracted

Targets

Emotet family

Emotet payload

MITRE ATT&CK Enterprise v15

Tasks

static1

behavioral1

behavioral2