emotet

General

Target

8324624adeef9004ece48afc659a24dbeece8933fd6390f57d333ebf95402cbc
Size

550KB
Sample

241120-3vc6wswhpl
MD5

df66558d8c255a828ce7e5cf9ae7480e
SHA1

3dafefafa9c89dde428d8ddcef0b710afeb20098
SHA256

8324624adeef9004ece48afc659a24dbeece8933fd6390f57d333ebf95402cbc
SHA512

6e2d3a66beac54769c87eabe21ecc31b3ea3418ef09eff1e44ed3bf50264221e473c79e0b8034d4a6f8f899f94d1656a80d54fb9f1a0cdf00a5743a3877a657b
SSDEEP

12288:F3MzbACOHXbGSZmpTYtUt/t1tJtE6eb2B2aDj:FOsCOHzmpTzrBBn

Score

10^/10

Malware Config

Extracted

Family

emotet

Botnet

Epoch3

C2

179.15.102.2:80

91.121.200.35:8080

159.203.16.11:8080

188.226.165.170:8080

78.90.78.210:80

181.59.59.54:80

143.95.101.72:8080

61.118.67.173:80

113.203.238.130:80

109.99.146.210:8080

2.58.16.86:8080

50.116.78.109:8080

188.166.220.180:7080

175.103.38.146:80

198.20.228.9:8080

5.2.246.108:80

115.79.195.246:80

187.193.221.143:80

41.76.213.144:8080

180.148.4.130:8080

rsa_pubkey.plain

Targets

- Target
  
  8324624adeef9004ece48afc659a24dbeece8933fd6390f57d333ebf95402cbc
- Size
  
  550KB
- MD5
  
  df66558d8c255a828ce7e5cf9ae7480e
- SHA1
  
  3dafefafa9c89dde428d8ddcef0b710afeb20098
- SHA256
  
  8324624adeef9004ece48afc659a24dbeece8933fd6390f57d333ebf95402cbc
- SHA512
  
  6e2d3a66beac54769c87eabe21ecc31b3ea3418ef09eff1e44ed3bf50264221e473c79e0b8034d4a6f8f899f94d1656a80d54fb9f1a0cdf00a5743a3877a657b
- SSDEEP
  
  12288:F3MzbACOHXbGSZmpTYtUt/t1tJtE6eb2B2aDj:FOsCOHzmpTzrBBn
Score

10^/10

emotet epoch3 banker discovery trojan
- Emotet
  Emotet is a trojan that is primarily spread through spam emails.
  trojan banker emotet
- Emotet family
  emotet
- Emotet payload
  Detects Emotet payload in memory.
  trojan banker
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

1

T1614

System Language Discovery

1

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Extracted

Targets

Emotet family

Emotet payload

MITRE ATT&CK Enterprise v15

Tasks

static1

behavioral1

behavioral2