emotet

General

Target

3c4864f8d05b78f157d55b127ad85c240dc0684c534f67c7033990dad6321f2c
Size

550KB
Sample

241120-3rj52awlas
MD5

96605497c2d797b8e2f9986529b49bc7
SHA1

ffb525e846fc721f733997dadd97cd177d8318c7
SHA256

3c4864f8d05b78f157d55b127ad85c240dc0684c534f67c7033990dad6321f2c
SHA512

18eee99fe51e4d3e4e5c2178987d481c9de4a37bb298cf05a7acab6218159ac81cf9fa71950130481808b56fce6fafb63a16b5cbf19a05a1178dab6f23981357
SSDEEP

12288:F3MzbACOHXbGSZmpTjtUt/t1tJtE6eb2B2aDj:FOsCOHzmpTMrBBn

Score

10^/10

Malware Config

Extracted

Family

emotet

Botnet

Epoch3

C2

179.15.102.2:80

91.121.200.35:8080

159.203.16.11:8080

188.226.165.170:8080

78.90.78.210:80

181.59.59.54:80

143.95.101.72:8080

61.118.67.173:80

113.203.238.130:80

109.99.146.210:8080

2.58.16.86:8080

50.116.78.109:8080

188.166.220.180:7080

175.103.38.146:80

198.20.228.9:8080

5.2.246.108:80

115.79.195.246:80

187.193.221.143:80

41.76.213.144:8080

180.148.4.130:8080

rsa_pubkey.plain

Targets

- Target
  
  3c4864f8d05b78f157d55b127ad85c240dc0684c534f67c7033990dad6321f2c
- Size
  
  550KB
- MD5
  
  96605497c2d797b8e2f9986529b49bc7
- SHA1
  
  ffb525e846fc721f733997dadd97cd177d8318c7
- SHA256
  
  3c4864f8d05b78f157d55b127ad85c240dc0684c534f67c7033990dad6321f2c
- SHA512
  
  18eee99fe51e4d3e4e5c2178987d481c9de4a37bb298cf05a7acab6218159ac81cf9fa71950130481808b56fce6fafb63a16b5cbf19a05a1178dab6f23981357
- SSDEEP
  
  12288:F3MzbACOHXbGSZmpTjtUt/t1tJtE6eb2B2aDj:FOsCOHzmpTMrBBn
Score

10^/10

emotet epoch3 banker discovery trojan
- Emotet
  Emotet is a trojan that is primarily spread through spam emails.
  trojan banker emotet
- Emotet family
  emotet
- Emotet payload
  Detects Emotet payload in memory.
  trojan banker
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

1

T1614

System Language Discovery

1

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Extracted

Targets

Emotet family

Emotet payload

MITRE ATT&CK Enterprise v15

Tasks

static1

behavioral1

behavioral2