emotet

General

Target

d1a67a2958d80aeac0b9e11f93ffb775c32bc6d1528bbaf709cdd04a85d861de.exe
Size

368KB
Sample

241125-lkpy9swnej
MD5

fb8bba5250cf9166767666013b0edbab
SHA1

e0391bd459d971819c5872163228c1920b941b98
SHA256

d1a67a2958d80aeac0b9e11f93ffb775c32bc6d1528bbaf709cdd04a85d861de
SHA512

4868dccb8ac0e1e96c41dd4fb9c81eba1ef01fc075079a382a6d419a052d555fb686c895f7a856df916f0677f32b02b5c69d13e4970622abf41cc743c09b3510
SSDEEP

6144:AozjUrx4KVHa9eUfTLHygDVjfML+YSettAlyb57P/z6GcNdJ8lGnY:AoiHV8zpYSe8lyRnzpcNdCMY

Score

10^/10

Malware Config

Extracted

Family

emotet

Botnet

Epoch3

C2

78.90.78.210:80

188.226.165.170:8080

188.40.170.197:80

51.38.50.144:8080

120.51.34.254:80

85.246.78.192:80

139.59.12.63:8080

46.105.131.68:8080

5.2.246.108:80

60.108.128.186:80

190.55.186.229:80

47.154.85.229:80

188.80.27.54:80

115.79.59.157:80

91.75.75.46:80

119.92.77.17:80

109.13.179.195:80

190.151.5.131:443

5.79.70.250:8080

175.103.38.146:80

rsa_pubkey.plain

Targets

- Target
  
  d1a67a2958d80aeac0b9e11f93ffb775c32bc6d1528bbaf709cdd04a85d861de.exe
- Size
  
  368KB
- MD5
  
  fb8bba5250cf9166767666013b0edbab
- SHA1
  
  e0391bd459d971819c5872163228c1920b941b98
- SHA256
  
  d1a67a2958d80aeac0b9e11f93ffb775c32bc6d1528bbaf709cdd04a85d861de
- SHA512
  
  4868dccb8ac0e1e96c41dd4fb9c81eba1ef01fc075079a382a6d419a052d555fb686c895f7a856df916f0677f32b02b5c69d13e4970622abf41cc743c09b3510
- SSDEEP
  
  6144:AozjUrx4KVHa9eUfTLHygDVjfML+YSettAlyb57P/z6GcNdJ8lGnY:AoiHV8zpYSe8lyRnzpcNdCMY
Score

10^/10

emotet epoch3 banker discovery trojan
- Emotet
  Emotet is a trojan that is primarily spread through spam emails.
  trojan banker emotet
- Emotet family
  emotet
- Emotet payload
  Detects Emotet payload in memory.
  trojan banker
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

1

T1614

System Language Discovery

1

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Extracted

Targets

Emotet family

Emotet payload

MITRE ATT&CK Enterprise v15

Tasks

static1

behavioral1

behavioral2