emotet

General

Target

52660754373d4f8e575af67baf8019d2ff6201a046a4da71191d5d24bc1d6411
Size

188KB
Sample

241120-3fsysswjdx
MD5

070d56d884aa92d0ddcdd025adc42480
SHA1

a631b05dffb057dfe5a9d96c30739843023da7e6
SHA256

52660754373d4f8e575af67baf8019d2ff6201a046a4da71191d5d24bc1d6411
SHA512

7a9d9f8a4070d1a537da287a88f1ee0a9720fa4aec624539b9691765b65b208c5e78d3c4b760d515cc489f334a8a1316a3c7cd7815f2e3bb0a49d002f9e7ddeb
SSDEEP

1536:ROwR2ZIZJZe7+l4AAkdXmJaYdt7ADBpBWkSlC5XIGA/3x09zn:ROwR2ZSJo6+A3m04UDBGY54r/q9zn

Score

10^/10

Malware Config

Extracted

Family

emotet

Botnet

Epoch2

C2

74.120.55.163:80

176.10.250.88:8080

96.8.113.4:8080

137.59.187.107:8080

74.208.45.104:8080

104.131.11.150:443

110.145.77.103:80

87.106.136.232:8080

114.146.222.200:80

37.187.72.193:8080

181.230.116.163:80

70.167.215.250:8080

103.86.49.11:8080

201.173.217.124:443

109.74.5.95:8080

95.213.236.64:8080

5.39.91.110:7080

78.24.219.147:8080

81.2.235.111:8080

183.101.175.193:80

rsa_pubkey.plain

Targets

- Target
  
  52660754373d4f8e575af67baf8019d2ff6201a046a4da71191d5d24bc1d6411
- Size
  
  188KB
- MD5
  
  070d56d884aa92d0ddcdd025adc42480
- SHA1
  
  a631b05dffb057dfe5a9d96c30739843023da7e6
- SHA256
  
  52660754373d4f8e575af67baf8019d2ff6201a046a4da71191d5d24bc1d6411
- SHA512
  
  7a9d9f8a4070d1a537da287a88f1ee0a9720fa4aec624539b9691765b65b208c5e78d3c4b760d515cc489f334a8a1316a3c7cd7815f2e3bb0a49d002f9e7ddeb
- SSDEEP
  
  1536:ROwR2ZIZJZe7+l4AAkdXmJaYdt7ADBpBWkSlC5XIGA/3x09zn:ROwR2ZSJo6+A3m04UDBGY54r/q9zn
Score

10^/10

emotet epoch2 banker discovery trojan
- Emotet
  Emotet is a trojan that is primarily spread through spam emails.
  trojan banker emotet
- Emotet family
  emotet
- Emotet payload
  Detects Emotet payload in memory.
  trojan banker
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

1

T1614

System Language Discovery

1

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Extracted

Targets

Emotet family

Emotet payload

MITRE ATT&CK Enterprise v15

Tasks

static1

behavioral1

behavioral2