emotet

General

Target

84caeb2fcfc0170beaacdc90ce71197607019b7bfac8d3e3610e74a0f183b049
Size

286KB
Sample

241121-arhb8awqex
MD5

9fb1776a1b80ae64b1a90b9055be7641
SHA1

87299954109554c7d58b2a195ee62bbf0e465afc
SHA256

84caeb2fcfc0170beaacdc90ce71197607019b7bfac8d3e3610e74a0f183b049
SHA512

db87c5b46bc904eb70ff1822a585f0277778197bad563fe987ca0afa5853ffd357939e9118f38852e97f932244cb4ebed9f0f9543f6f868b9d5016fcdaeac102
SSDEEP

6144:eeVPhVTZAWze4x3fZbgGclTHjGYaEckMG76MJ:lOWze4xBbRxKcAHJ

Score

10^/10

Malware Config

Extracted

Family

emotet

Botnet

Epoch2

C2

74.120.55.163:80

176.10.250.88:8080

96.8.113.4:8080

137.59.187.107:8080

74.208.45.104:8080

104.131.11.150:443

110.145.77.103:80

87.106.136.232:8080

114.146.222.200:80

37.187.72.193:8080

181.230.116.163:80

70.167.215.250:8080

103.86.49.11:8080

201.173.217.124:443

109.74.5.95:8080

95.213.236.64:8080

5.39.91.110:7080

78.24.219.147:8080

81.2.235.111:8080

183.101.175.193:80

rsa_pubkey.plain

Targets

- Target
  
  84caeb2fcfc0170beaacdc90ce71197607019b7bfac8d3e3610e74a0f183b049
- Size
  
  286KB
- MD5
  
  9fb1776a1b80ae64b1a90b9055be7641
- SHA1
  
  87299954109554c7d58b2a195ee62bbf0e465afc
- SHA256
  
  84caeb2fcfc0170beaacdc90ce71197607019b7bfac8d3e3610e74a0f183b049
- SHA512
  
  db87c5b46bc904eb70ff1822a585f0277778197bad563fe987ca0afa5853ffd357939e9118f38852e97f932244cb4ebed9f0f9543f6f868b9d5016fcdaeac102
- SSDEEP
  
  6144:eeVPhVTZAWze4x3fZbgGclTHjGYaEckMG76MJ:lOWze4xBbRxKcAHJ
Score

10^/10

emotet epoch2 banker discovery trojan
- Emotet
  Emotet is a trojan that is primarily spread through spam emails.
  trojan banker emotet
- Emotet family
  emotet
- Emotet payload
  Detects Emotet payload in memory.
  trojan banker
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

1

T1614

System Language Discovery

1

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Extracted

Targets

Emotet family

Emotet payload

MITRE ATT&CK Enterprise v15

Tasks

static1

behavioral1

behavioral2