emotet

General

Target

753103b1ad8a8d8f143a0d4f68e2f3ae210a14ce3840e8852c497a1595198e08
Size

632KB
Sample

241120-3trb5azrhm
MD5

18bf5c06dcc4c8f42216daf73036ea6f
SHA1

2d15a83262310b0822247ae3bf47aad270925b1a
SHA256

753103b1ad8a8d8f143a0d4f68e2f3ae210a14ce3840e8852c497a1595198e08
SHA512

dbcc6dede86b697263fd8646f2397920291ad06c295dc642dbf29435eaee79da88835bdd69dc7fcc4b4c1c4b43dcb5fa8169a6a9cae8a811ea6d80cebd6724db
SSDEEP

12288:WCjBePRPHFPikH0+IQmOZJ6+Px7ZHp5x+NDPaJ:iPdikU+IQ1Zt7Zh+RaJ

Score

10^/10

Malware Config

Extracted

Family

emotet

Botnet

Epoch1

C2

45.173.88.33:80

209.126.6.222:8080

5.153.250.14:8080

77.90.136.129:8080

104.131.41.185:8080

190.190.148.27:8080

95.85.151.205:80

46.28.111.142:7080

91.222.77.105:80

80.249.176.206:80

83.169.21.32:7080

213.60.96.117:80

185.94.252.27:443

89.32.150.160:8080

12.162.84.2:8080

81.198.69.61:80

85.105.140.135:443

202.4.57.96:80

147.91.184.91:80

192.241.143.52:8080

rsa_pubkey.plain

Targets

- Target
  
  753103b1ad8a8d8f143a0d4f68e2f3ae210a14ce3840e8852c497a1595198e08
- Size
  
  632KB
- MD5
  
  18bf5c06dcc4c8f42216daf73036ea6f
- SHA1
  
  2d15a83262310b0822247ae3bf47aad270925b1a
- SHA256
  
  753103b1ad8a8d8f143a0d4f68e2f3ae210a14ce3840e8852c497a1595198e08
- SHA512
  
  dbcc6dede86b697263fd8646f2397920291ad06c295dc642dbf29435eaee79da88835bdd69dc7fcc4b4c1c4b43dcb5fa8169a6a9cae8a811ea6d80cebd6724db
- SSDEEP
  
  12288:WCjBePRPHFPikH0+IQmOZJ6+Px7ZHp5x+NDPaJ:iPdikU+IQ1Zt7Zh+RaJ
Score

10^/10

emotet epoch1 banker discovery trojan
- Emotet
  Emotet is a trojan that is primarily spread through spam emails.
  trojan banker emotet
- Emotet family
  emotet
- Emotet payload
  Detects Emotet payload in memory.
  trojan banker
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

1

T1614

System Language Discovery

1

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Extracted

Targets

Emotet family

Emotet payload

MITRE ATT&CK Enterprise v15

Tasks

static1

behavioral1

behavioral2