emotet

General

Target

977902b0b2f7d167e32e096120b7b8150c0c54d667d2057d19e8e4135e325ca7
Size

574KB
Sample

241120-3l4mgswaje
MD5

bc9e69172bf29a74746913dea0b7a5d1
SHA1

2b4d13c6c71b9b38b5616f3f25c0d6d7e2bb7b5b
SHA256

977902b0b2f7d167e32e096120b7b8150c0c54d667d2057d19e8e4135e325ca7
SHA512

d639957d800749b8b76e8020d266833450ff5378fa129be2d506b5e575dba81536090f93b5b5092bd69e0c48ea1bbe4f0873e5e325110697548ad537872a7e4c
SSDEEP

6144:Ux8FPmWqwcz68XkgP+iKW8g/UcFqPm0iXc5n4MEP5:3qw4jGiUwZnLXc5nxEP5

Score

10^/10

Malware Config

Extracted

Family

emotet

Botnet

Epoch2

C2

94.49.254.194:80

212.51.142.238:8080

91.231.166.124:8080

162.241.92.219:8080

79.98.24.39:8080

109.117.53.230:443

78.189.165.52:8080

113.160.130.116:8443

121.124.124.40:7080

101.187.97.173:80

168.235.67.138:7080

104.131.44.150:8080

5.39.91.110:7080

139.59.60.244:8080

81.2.235.111:8080

116.203.32.252:8080

61.19.246.238:443

176.111.60.55:8080

190.55.181.54:443

108.48.41.69:80

rsa_pubkey.plain

Targets

- Target
  
  977902b0b2f7d167e32e096120b7b8150c0c54d667d2057d19e8e4135e325ca7
- Size
  
  574KB
- MD5
  
  bc9e69172bf29a74746913dea0b7a5d1
- SHA1
  
  2b4d13c6c71b9b38b5616f3f25c0d6d7e2bb7b5b
- SHA256
  
  977902b0b2f7d167e32e096120b7b8150c0c54d667d2057d19e8e4135e325ca7
- SHA512
  
  d639957d800749b8b76e8020d266833450ff5378fa129be2d506b5e575dba81536090f93b5b5092bd69e0c48ea1bbe4f0873e5e325110697548ad537872a7e4c
- SSDEEP
  
  6144:Ux8FPmWqwcz68XkgP+iKW8g/UcFqPm0iXc5n4MEP5:3qw4jGiUwZnLXc5nxEP5
Score

10^/10

emotet epoch2 banker discovery trojan
- Emotet
  Emotet is a trojan that is primarily spread through spam emails.
  trojan banker emotet
- Emotet family
  emotet
- Emotet payload
  Detects Emotet payload in memory.
  trojan banker
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

1

T1614

System Language Discovery

1

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Extracted

Targets

Emotet family

Emotet payload

MITRE ATT&CK Enterprise v15

Tasks

static1

behavioral1

behavioral2