emotet

General

Target

32fe3c1635a68d0865f7a8074e029684d6c3eab7802ee104acaaaaa824300abb
Size

423KB
Sample

241121-amgvwswenf
MD5

6427d5333fbd4d7282d54b242bfa362e
SHA1

9e57d44758677aa9adafdbf358856dbd94f5d50a
SHA256

32fe3c1635a68d0865f7a8074e029684d6c3eab7802ee104acaaaaa824300abb
SHA512

34e284a7144d8136cff80e14cb4d71b21e15763bdb024c1038b2134d18f65f7c1603d9a2d860628b83c1599f34671e2e9e0afb9b59d145946f669d887adae8be
SSDEEP

6144:PZUCuTJlyIOziaTGy+IeIt1xJh5eWhv/w62LcuPv8cD4mRKqdONyAzDxkMwp2/uK:Py7EzZ4+HvY62LxHJ4KTGDlT

Score

10^/10

Malware Config

Extracted

Family

emotet

Botnet

Epoch4

C2

185.4.135.165:8080

159.89.202.34:443

82.223.21.224:8080

187.63.160.88:80

188.44.20.25:443

91.187.140.35:8080

110.232.117.186:8080

197.242.150.244:8080

119.59.103.152:8080

182.162.143.56:443

72.15.201.15:8080

173.255.211.88:443

206.189.28.199:8080

94.23.45.86:4143

45.63.99.23:7080

153.126.146.25:7080

45.118.115.99:8080

115.68.227.76:8080

163.44.196.120:8080

159.65.140.115:443

ecs1.plain

eck1.plain

Targets

- Target
  
  32fe3c1635a68d0865f7a8074e029684d6c3eab7802ee104acaaaaa824300abb
- Size
  
  423KB
- MD5
  
  6427d5333fbd4d7282d54b242bfa362e
- SHA1
  
  9e57d44758677aa9adafdbf358856dbd94f5d50a
- SHA256
  
  32fe3c1635a68d0865f7a8074e029684d6c3eab7802ee104acaaaaa824300abb
- SHA512
  
  34e284a7144d8136cff80e14cb4d71b21e15763bdb024c1038b2134d18f65f7c1603d9a2d860628b83c1599f34671e2e9e0afb9b59d145946f669d887adae8be
- SSDEEP
  
  6144:PZUCuTJlyIOziaTGy+IeIt1xJh5eWhv/w62LcuPv8cD4mRKqdONyAzDxkMwp2/uK:Py7EzZ4+HvY62LxHJ4KTGDlT
Score

10^/10

emotet epoch4 banker trojan
- Emotet
  Emotet is a trojan that is primarily spread through spam emails.
  trojan banker emotet
- Emotet family
  emotet
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

Sharing

General

Malware Config

Extracted

Targets

Emotet family

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

behavioral2