emotet

General

Target

d24047f8f22c9a39528e0e57ea1610238c7feb7e236c5d010abb26d15a177ddcN.exe
Size

416KB
Sample

241124-j26l8s1nhz
MD5

25636bb0f709eeaf06c825ece80f2fd0
SHA1

e920f2dc8701f1fdcf45d888f7a910fc5074469b
SHA256

d24047f8f22c9a39528e0e57ea1610238c7feb7e236c5d010abb26d15a177ddc
SHA512

5093f5b225bb3270ebbc1397e46bf06f43b4650621a7ec810bfcbb393f7f4cd452de5956174254e5625aab67d8e90e55d2c823233eaf2224e0d9e2598cd48cab
SSDEEP

12288:1XsObAC+H3bd40FM1Opz2t8t/tltJt0QwW7jSVW:1zMC+HTFM1OpzkW7jSs

Score

10^/10

Malware Config

Extracted

Family

emotet

Botnet

Epoch3

C2

179.15.102.2:80

91.121.200.35:8080

159.203.16.11:8080

188.226.165.170:8080

78.90.78.210:80

181.59.59.54:80

143.95.101.72:8080

61.118.67.173:80

113.203.238.130:80

109.99.146.210:8080

2.58.16.86:8080

50.116.78.109:8080

188.166.220.180:7080

175.103.38.146:80

198.20.228.9:8080

5.2.246.108:80

115.79.195.246:80

187.193.221.143:80

41.76.213.144:8080

180.148.4.130:8080

rsa_pubkey.plain

Targets

- Target
  
  d24047f8f22c9a39528e0e57ea1610238c7feb7e236c5d010abb26d15a177ddcN.exe
- Size
  
  416KB
- MD5
  
  25636bb0f709eeaf06c825ece80f2fd0
- SHA1
  
  e920f2dc8701f1fdcf45d888f7a910fc5074469b
- SHA256
  
  d24047f8f22c9a39528e0e57ea1610238c7feb7e236c5d010abb26d15a177ddc
- SHA512
  
  5093f5b225bb3270ebbc1397e46bf06f43b4650621a7ec810bfcbb393f7f4cd452de5956174254e5625aab67d8e90e55d2c823233eaf2224e0d9e2598cd48cab
- SSDEEP
  
  12288:1XsObAC+H3bd40FM1Opz2t8t/tltJt0QwW7jSVW:1zMC+HTFM1OpzkW7jSs
Score

10^/10

emotet epoch3 banker discovery trojan
- Emotet
  Emotet is a trojan that is primarily spread through spam emails.
  trojan banker emotet
- Emotet family
  emotet
- Emotet payload
  Detects Emotet payload in memory.
  trojan banker
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

1

T1614

System Language Discovery

1

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Extracted

Targets

Emotet family

Emotet payload

MITRE ATT&CK Enterprise v15

Tasks

static1

behavioral1

behavioral2