emotet

General

Target

a0b564bd7b5e0eec12c46b57c704cb46a0e53479d8ad249fd254a321ca3bfcc1
Size

340KB
Sample

241120-y7wrjsscnf
MD5

3234c5c718c67d67ac71e6d62cc789dc
SHA1

b2bc60cb4e981bd953f1ad81dc15df66cd2b5692
SHA256

a0b564bd7b5e0eec12c46b57c704cb46a0e53479d8ad249fd254a321ca3bfcc1
SHA512

164877582b1f85412b4d9c707ff2fd3f87db79b2b3aa8d953ec55ca95cb36b07d714e54e69576dac7e1a4235766be478d220ffa4725e7df6b2ba13336277d3ad
SSDEEP

6144:wYyj2E73Aehymggrl0fRApJX0bk032j4Ui+q0fuB9vm8w81/b8EvJUzsiRnzEBI:wFj2EDrImgJAph0bk0Ki02Dnwg/gEuzZ

Score

10^/10

Malware Config

Extracted

Family

emotet

Botnet

Epoch5

C2

178.238.225.252:8080

139.196.72.155:8080

36.67.23.59:443

103.56.149.105:8080

37.44.244.177:8080

85.25.120.45:8080

202.134.4.210:7080

78.47.204.80:443

83.229.80.93:8080

93.104.209.107:8080

80.211.107.116:8080

165.22.254.236:8080

104.244.79.94:443

185.148.169.10:8080

190.145.8.4:443

175.126.176.79:8080

139.59.80.108:8080

188.165.79.151:443

128.199.217.206:443

64.227.55.231:8080

ecs1.plain

eck1.plain

Targets

- Target
  
  7e570347dc83016227710f64ccb2d86444493fba.rl
- Size
  
  616KB
- MD5
  
  c2d2e88a32776146082c5a5db1c93973
- SHA1
  
  7e570347dc83016227710f64ccb2d86444493fba
- SHA256
  
  4eb33d4ce03f3992a1a0ddc38b7449ba327f4d0da5e46fc35566365d5ef0833c
- SHA512
  
  3c276987815a890729c459b5378e814cb8d6c8ea4c75ebaf5ffa49ce8fffbb105f4c8311f02d74240aa66d05b256f371f1563bfe0d53514f6a4bc2324081bf84
- SSDEEP
  
  12288:hhaNscUtuhEyfgzKGjrU/Z4yrfApwjWi3J/n5pIQRX3Z:hha2cUAozKGjrBW9jLz
Score

10^/10

emotet epoch5 banker trojan
- Emotet
  Emotet is a trojan that is primarily spread through spam emails.
  trojan banker emotet
- Emotet family
  emotet
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

Sharing

General

Malware Config

Extracted

Targets

Emotet family

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

behavioral2