emotet

General

Target

4a684374babba841fdbf0ae1b7bbbd162d02ddfe56c0356be7f8886138f9aaf5
Size

64KB
Sample

241121-a21asawgrb
MD5

b0fabd9fafc6ec4027c217faa249b721
SHA1

47970a2da230c7d6a6d6258ff83544336bd30e6e
SHA256

4a684374babba841fdbf0ae1b7bbbd162d02ddfe56c0356be7f8886138f9aaf5
SHA512

626cea509790cfba939c8411f8505546978d58ab11b045c4d14a997186c9d37f9adb6c1fce7cafe0b1d4fa13356ae991fd87255a17b7ffa3980aa19d28b1c76f
SSDEEP

768:P+SswhBeb0ATo5pES2EDzVDPS12OSRs3ALpkyQeIpekt+oqYeORERI6h7a:uwh92nEZPRO62feRve

Score

10^/10

Malware Config

Extracted

Family

emotet

Botnet

Epoch3

C2

177.37.81.212:443

74.207.230.187:8080

190.164.75.175:80

87.252.100.28:80

105.209.239.55:80

163.172.107.70:8080

37.208.106.146:8080

24.157.25.203:80

212.112.113.235:80

140.207.113.106:443

75.139.38.211:80

192.210.217.94:8080

46.49.124.53:80

75.127.14.170:8080

87.106.231.60:8080

139.59.12.63:8080

181.167.35.84:80

201.214.108.231:80

74.208.173.91:8080

189.146.1.78:443

rsa_pubkey.plain

Targets

- Target
  
  4a684374babba841fdbf0ae1b7bbbd162d02ddfe56c0356be7f8886138f9aaf5
- Size
  
  64KB
- MD5
  
  b0fabd9fafc6ec4027c217faa249b721
- SHA1
  
  47970a2da230c7d6a6d6258ff83544336bd30e6e
- SHA256
  
  4a684374babba841fdbf0ae1b7bbbd162d02ddfe56c0356be7f8886138f9aaf5
- SHA512
  
  626cea509790cfba939c8411f8505546978d58ab11b045c4d14a997186c9d37f9adb6c1fce7cafe0b1d4fa13356ae991fd87255a17b7ffa3980aa19d28b1c76f
- SSDEEP
  
  768:P+SswhBeb0ATo5pES2EDzVDPS12OSRs3ALpkyQeIpekt+oqYeORERI6h7a:uwh92nEZPRO62feRve
Score

10^/10

emotet epoch3 banker discovery trojan
- Emotet
  Emotet is a trojan that is primarily spread through spam emails.
  trojan banker emotet
- Emotet family
  emotet
- Emotet payload
  Detects Emotet payload in memory.
  trojan banker
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

1

T1614

System Language Discovery

1

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Extracted

Targets

Emotet family

Emotet payload

MITRE ATT&CK Enterprise v15

Tasks

static1

behavioral1

behavioral2