emotet

General

Target

f484af26987ef03e87b2e1fcf615aa750d7c6341c241999b0e2d783ee5c473d4
Size

184KB
Sample

241123-fyccfavqfp
MD5

af243cff38e0f088f90666c3b4cbb77e
SHA1

d29ef57104fa484792d99ca3ad7779853893c694
SHA256

f484af26987ef03e87b2e1fcf615aa750d7c6341c241999b0e2d783ee5c473d4
SHA512

5d48d85093b15961b8086afa81f56e9547bdd7868017be2ce7d23c2e832b220a61ba24aa04c9a8be0d79459ef6e65e50d9f08a4bdc4e445ef08dcefadc282ebb
SSDEEP

3072:OpocVfb++Xuy7YXDxaOhlS/pkxno3mOuTXd4LltbTSdKekyOI:sDZ++eNTxyxkucXd4LltbT

Score

10^/10

Malware Config

Extracted

Family

emotet

Botnet

Epoch2

C2

24.233.112.152:80

69.30.203.214:8080

192.210.135.126:8080

47.144.21.12:443

157.245.99.39:8080

119.198.40.179:80

62.75.141.82:80

181.211.11.242:80

167.86.90.214:8080

95.213.236.64:8080

87.106.139.101:8080

109.74.5.95:8080

142.105.151.124:443

47.146.117.214:80

185.94.252.104:443

2.58.16.85:7080

222.214.218.37:4143

85.105.205.77:8080

190.160.53.126:80

107.185.211.16:80

rsa_pubkey.plain

Targets

- Target
  
  f484af26987ef03e87b2e1fcf615aa750d7c6341c241999b0e2d783ee5c473d4
- Size
  
  184KB
- MD5
  
  af243cff38e0f088f90666c3b4cbb77e
- SHA1
  
  d29ef57104fa484792d99ca3ad7779853893c694
- SHA256
  
  f484af26987ef03e87b2e1fcf615aa750d7c6341c241999b0e2d783ee5c473d4
- SHA512
  
  5d48d85093b15961b8086afa81f56e9547bdd7868017be2ce7d23c2e832b220a61ba24aa04c9a8be0d79459ef6e65e50d9f08a4bdc4e445ef08dcefadc282ebb
- SSDEEP
  
  3072:OpocVfb++Xuy7YXDxaOhlS/pkxno3mOuTXd4LltbTSdKekyOI:sDZ++eNTxyxkucXd4LltbT
Score

10^/10

emotet epoch2 banker discovery trojan
- Emotet
  Emotet is a trojan that is primarily spread through spam emails.
  trojan banker emotet
- Emotet family
  emotet
- Emotet payload
  Detects Emotet payload in memory.
  trojan banker
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

1

T1614

System Language Discovery

1

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Extracted

Targets

Emotet family

Emotet payload

MITRE ATT&CK Enterprise v15

Tasks

static1

behavioral1

behavioral2