emotet

General

Target

a72a9aeaa04a3e1b5dfc5fad05ff2dbcf13c6a4d24140490c149c405193cb92a
Size

176KB
Sample

241120-3lrypazqfr
MD5

4f5df415d145e4c78c4c6198ff3fe09d
SHA1

4bbf5a9d3c4e4e961469882bc3d1420beccfe5e0
SHA256

a72a9aeaa04a3e1b5dfc5fad05ff2dbcf13c6a4d24140490c149c405193cb92a
SHA512

f4cf61781ef62bc46096747b8e63e8daf254be0cdb51d1ffda66d9cb69e998173a3d06de05fe758945e9c5f7f3ecc4ae2daf6146c23d64c096c983d5947af86d
SSDEEP

3072:Rau42Vx5xX4VCSaFpDXDX8uXsu21zIl/36FZUGgfNI2/:RT42f7X4V9m8uXsuA9arfNr

Score

10^/10

Malware Config

Extracted

Family

emotet

Botnet

Epoch2

C2

154.91.33.137:443

49.12.113.171:8080

167.114.153.111:8080

87.106.136.232:8080

110.145.77.103:80

74.214.230.200:80

186.74.215.34:80

37.179.204.33:80

172.86.188.251:8080

75.188.96.231:80

118.83.154.64:443

209.54.13.14:80

176.113.52.6:443

97.82.79.83:80

112.185.64.233:80

119.59.116.21:8080

62.171.142.179:8080

62.75.141.82:80

139.99.158.11:443

50.91.114.38:80

rsa_pubkey.plain

Targets

- Target
  
  a72a9aeaa04a3e1b5dfc5fad05ff2dbcf13c6a4d24140490c149c405193cb92a
- Size
  
  176KB
- MD5
  
  4f5df415d145e4c78c4c6198ff3fe09d
- SHA1
  
  4bbf5a9d3c4e4e961469882bc3d1420beccfe5e0
- SHA256
  
  a72a9aeaa04a3e1b5dfc5fad05ff2dbcf13c6a4d24140490c149c405193cb92a
- SHA512
  
  f4cf61781ef62bc46096747b8e63e8daf254be0cdb51d1ffda66d9cb69e998173a3d06de05fe758945e9c5f7f3ecc4ae2daf6146c23d64c096c983d5947af86d
- SSDEEP
  
  3072:Rau42Vx5xX4VCSaFpDXDX8uXsu21zIl/36FZUGgfNI2/:RT42f7X4V9m8uXsuA9arfNr
Score

10^/10

emotet epoch2 banker discovery trojan
- Emotet
  Emotet is a trojan that is primarily spread through spam emails.
  trojan banker emotet
- Emotet family
  emotet
- Emotet payload
  Detects Emotet payload in memory.
  trojan banker
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

1

T1614

System Language Discovery

1

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Extracted

Targets

Emotet family

Emotet payload

MITRE ATT&CK Enterprise v15

Tasks

static1

behavioral1

behavioral2