emotet

General

Target

JaffaCakes118_e04e1082381e0e6331c36a785126eba68e8fb31c0402f773f301717b773eccdb
Size

422KB
Sample

241221-2newgaspap
MD5

265e874729a64ed10581459dd82f4d54
SHA1

4bb82881c5ca2dd957b8c3194b58b5d52bee7c73
SHA256

e04e1082381e0e6331c36a785126eba68e8fb31c0402f773f301717b773eccdb
SHA512

ab64d7c4fdb923cbab99bab8207ebf44bf3bf5462e33a367b480b9ecdbd37232f42910ca1fa2d7f5fef2c11a4eb876be121b4f1c460431e5613beecbe56c6966
SSDEEP

12288:IPIdPfxR2oQ4uKshPJWE0AxsY6EJfjq6:tpJR2z4bsdJD0bSbq

Score

10^/10

Malware Config

Extracted

Family

emotet

Botnet

Epoch5

C2

210.57.209.142:8080

103.56.149.105:8080

104.248.225.227:8080

103.41.204.169:8080

175.126.176.79:8080

207.148.81.119:8080

110.235.83.107:7080

54.38.242.185:443

103.133.214.242:8080

88.217.172.165:8080

68.183.93.250:443

159.69.237.188:443

51.68.141.164:8080

37.44.244.177:8080

54.37.228.122:443

68.183.91.111:8080

196.44.98.190:8080

78.47.204.80:443

37.59.209.141:8080

116.124.128.206:8080

ecs1.plain

eck1.plain

Targets

- Target
  
  JaffaCakes118_e04e1082381e0e6331c36a785126eba68e8fb31c0402f773f301717b773eccdb
- Size
  
  422KB
- MD5
  
  265e874729a64ed10581459dd82f4d54
- SHA1
  
  4bb82881c5ca2dd957b8c3194b58b5d52bee7c73
- SHA256
  
  e04e1082381e0e6331c36a785126eba68e8fb31c0402f773f301717b773eccdb
- SHA512
  
  ab64d7c4fdb923cbab99bab8207ebf44bf3bf5462e33a367b480b9ecdbd37232f42910ca1fa2d7f5fef2c11a4eb876be121b4f1c460431e5613beecbe56c6966
- SSDEEP
  
  12288:IPIdPfxR2oQ4uKshPJWE0AxsY6EJfjq6:tpJR2z4bsdJD0bSbq
Score

10^/10

emotet epoch5 banker trojan
- Emotet
  Emotet is a trojan that is primarily spread through spam emails.
  trojan banker emotet
- Emotet family
  emotet
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

Sharing

General

Malware Config

Extracted

Targets

Emotet family

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

behavioral2