emotet

General

Target

b419a8652e4f0dc34e6c06523ae376eaff58e5bcded01293bf77fa46d82a1de2
Size

286KB
Sample

241121-akvc7s1lhp
MD5

b08a9303549d85f71e94345492033f00
SHA1

0f91ecbe18b5b58e3c318f3cc32db4b0bd00af1c
SHA256

b419a8652e4f0dc34e6c06523ae376eaff58e5bcded01293bf77fa46d82a1de2
SHA512

607f626d3896eeb52caa34e96421d4ca41619450a7f4fc909a018a6fc83dd4acefad4ee334b93f6a90b0cf47c8887086386ca9cc1c1af9c856d1c06f2b4ab267
SSDEEP

6144:GeVPhVTZAWze4x3fZbgGc4THjGYaEckMG76MJ:9OWze4xBbRqKcAHJ

Score

10^/10

Malware Config

Extracted

Family

emotet

Botnet

Epoch2

C2

74.120.55.163:80

176.10.250.88:8080

96.8.113.4:8080

137.59.187.107:8080

74.208.45.104:8080

104.131.11.150:443

110.145.77.103:80

87.106.136.232:8080

114.146.222.200:80

37.187.72.193:8080

181.230.116.163:80

70.167.215.250:8080

103.86.49.11:8080

201.173.217.124:443

109.74.5.95:8080

95.213.236.64:8080

5.39.91.110:7080

78.24.219.147:8080

81.2.235.111:8080

183.101.175.193:80

rsa_pubkey.plain

Targets

- Target
  
  b419a8652e4f0dc34e6c06523ae376eaff58e5bcded01293bf77fa46d82a1de2
- Size
  
  286KB
- MD5
  
  b08a9303549d85f71e94345492033f00
- SHA1
  
  0f91ecbe18b5b58e3c318f3cc32db4b0bd00af1c
- SHA256
  
  b419a8652e4f0dc34e6c06523ae376eaff58e5bcded01293bf77fa46d82a1de2
- SHA512
  
  607f626d3896eeb52caa34e96421d4ca41619450a7f4fc909a018a6fc83dd4acefad4ee334b93f6a90b0cf47c8887086386ca9cc1c1af9c856d1c06f2b4ab267
- SSDEEP
  
  6144:GeVPhVTZAWze4x3fZbgGc4THjGYaEckMG76MJ:9OWze4xBbRqKcAHJ
Score

10^/10

emotet epoch2 banker discovery trojan
- Emotet
  Emotet is a trojan that is primarily spread through spam emails.
  trojan banker emotet
- Emotet family
  emotet
- Emotet payload
  Detects Emotet payload in memory.
  trojan banker
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

1

T1614

System Language Discovery

1

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Extracted

Targets

Emotet family

Emotet payload

MITRE ATT&CK Enterprise v15

Tasks

static1

behavioral1

behavioral2