emotet

General

Target

cabefdeea48491377cfafc7b7c4eaa5240a41cd979598a825df2e0ea6f096f68
Size

116KB
Sample

241121-aeq4la1laj
MD5

4a17b19d62086f0612fad61084d9b0a3
SHA1

bbc07bc553cbba84fa8ca365ec047e640fec47fa
SHA256

cabefdeea48491377cfafc7b7c4eaa5240a41cd979598a825df2e0ea6f096f68
SHA512

5f326fdbefa1b8adf316fa44064165482970c84194282934ebb51180b51cbe42b110af2e99be30eb2cff6495e9b938e30382f2ab7fe528266b2487f3ede3891b
SSDEEP

1536:NWVZevKRq9oidl5SYuO7a8LUQiQSfKEuxEPLYF:VKRqOiGGaEUDnKEDPLYF

Score

10^/10

Malware Config

Extracted

Family

emotet

Botnet

Epoch1

C2

45.173.88.33:80

209.126.6.222:8080

5.153.250.14:8080

77.90.136.129:8080

104.131.41.185:8080

190.190.148.27:8080

95.85.151.205:80

46.28.111.142:7080

91.222.77.105:80

80.249.176.206:80

83.169.21.32:7080

213.60.96.117:80

185.94.252.27:443

89.32.150.160:8080

12.162.84.2:8080

81.198.69.61:80

85.105.140.135:443

202.4.57.96:80

147.91.184.91:80

192.241.143.52:8080

rsa_pubkey.plain

Targets

- Target
  
  cabefdeea48491377cfafc7b7c4eaa5240a41cd979598a825df2e0ea6f096f68
- Size
  
  116KB
- MD5
  
  4a17b19d62086f0612fad61084d9b0a3
- SHA1
  
  bbc07bc553cbba84fa8ca365ec047e640fec47fa
- SHA256
  
  cabefdeea48491377cfafc7b7c4eaa5240a41cd979598a825df2e0ea6f096f68
- SHA512
  
  5f326fdbefa1b8adf316fa44064165482970c84194282934ebb51180b51cbe42b110af2e99be30eb2cff6495e9b938e30382f2ab7fe528266b2487f3ede3891b
- SSDEEP
  
  1536:NWVZevKRq9oidl5SYuO7a8LUQiQSfKEuxEPLYF:VKRqOiGGaEUDnKEDPLYF
Score

10^/10

emotet epoch1 banker discovery trojan
- Emotet
  Emotet is a trojan that is primarily spread through spam emails.
  trojan banker emotet
- Emotet family
  emotet
- Emotet payload
  Detects Emotet payload in memory.
  trojan banker
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

1

T1614

System Language Discovery

1

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Extracted

Targets

Emotet family

Emotet payload

MITRE ATT&CK Enterprise v15

Tasks

static1

behavioral1

behavioral2