emotet

General

Target

d29cf9f398d9c4676f673d1fa6aaae0c24bcefaea7eace40bb983275730bbdfd
Size

304KB
Sample

241120-3dbazavgpc
MD5

405af9b84ad05db9e16b43f8ac194330
SHA1

976d12895d2ee387f824e2bef856f34faaf691f5
SHA256

d29cf9f398d9c4676f673d1fa6aaae0c24bcefaea7eace40bb983275730bbdfd
SHA512

ac32ddc88ba9614452d7f9f632e0f61628b6926de5eecdf3ac4a5aaf56fa1e9ba04a39681e9f04ccabbf88971c2fe6cd69730ca507f4c78842cfaa4affdb7c32
SSDEEP

6144:/ffinDToTm2cBd7ujJzt5eBMrpkxHssrz4GYaEckMG76Mr:o2cBd7+t5TsrzTKcAHr

Score

10^/10

Malware Config

Extracted

Family

emotet

Botnet

Epoch2

C2

74.120.55.163:80

176.10.250.88:8080

96.8.113.4:8080

137.59.187.107:8080

74.208.45.104:8080

104.131.11.150:443

110.145.77.103:80

87.106.136.232:8080

114.146.222.200:80

37.187.72.193:8080

181.230.116.163:80

70.167.215.250:8080

103.86.49.11:8080

201.173.217.124:443

109.74.5.95:8080

95.213.236.64:8080

5.39.91.110:7080

78.24.219.147:8080

81.2.235.111:8080

183.101.175.193:80

rsa_pubkey.plain

Targets

- Target
  
  d29cf9f398d9c4676f673d1fa6aaae0c24bcefaea7eace40bb983275730bbdfd
- Size
  
  304KB
- MD5
  
  405af9b84ad05db9e16b43f8ac194330
- SHA1
  
  976d12895d2ee387f824e2bef856f34faaf691f5
- SHA256
  
  d29cf9f398d9c4676f673d1fa6aaae0c24bcefaea7eace40bb983275730bbdfd
- SHA512
  
  ac32ddc88ba9614452d7f9f632e0f61628b6926de5eecdf3ac4a5aaf56fa1e9ba04a39681e9f04ccabbf88971c2fe6cd69730ca507f4c78842cfaa4affdb7c32
- SSDEEP
  
  6144:/ffinDToTm2cBd7ujJzt5eBMrpkxHssrz4GYaEckMG76Mr:o2cBd7+t5TsrzTKcAHr
Score

10^/10

emotet epoch2 banker discovery trojan
- Emotet
  Emotet is a trojan that is primarily spread through spam emails.
  trojan banker emotet
- Emotet family
  emotet
- Emotet payload
  Detects Emotet payload in memory.
  trojan banker
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

1

T1614

System Language Discovery

1

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Extracted

Targets

Emotet family

Emotet payload

MITRE ATT&CK Enterprise v15

Tasks

static1

behavioral1

behavioral2