emotet

General

Target

JaffaCakes118_33691c32ca343d5b2594023cb0aa12377c99283d8fd89a97661d64b7d1bd1dc9
Size

316KB
Sample

241223-tnrk9strgz
MD5

9a5a313dbacdfc68028447d26edf615f
SHA1

925adb9178a8534f31020d0c7770ec64ddd546e2
SHA256

33691c32ca343d5b2594023cb0aa12377c99283d8fd89a97661d64b7d1bd1dc9
SHA512

c0dc9ff7a4ea4caf2b423c07c2f98f9545b92228e07456d2ce6c02edb6d798285478b947c57ebeecd4272f849e984007cbfdb1cfaf14202f7e87e475b3b8ffd5
SSDEEP

6144:kEUGyPNs/0SxfioredWL8ExpZkMBH60A:kEUGys0kfgdWLfpZkM

Score

10^/10

Malware Config

Extracted

Family

emotet

Botnet

Epoch3

C2

177.37.81.212:443

74.207.230.187:8080

190.164.75.175:80

87.252.100.28:80

105.209.239.55:80

163.172.107.70:8080

37.208.106.146:8080

24.157.25.203:80

212.112.113.235:80

140.207.113.106:443

75.139.38.211:80

192.210.217.94:8080

46.49.124.53:80

75.127.14.170:8080

87.106.231.60:8080

139.59.12.63:8080

181.167.35.84:80

201.214.108.231:80

74.208.173.91:8080

189.146.1.78:443

rsa_pubkey.plain

Targets

- Target
  
  JaffaCakes118_33691c32ca343d5b2594023cb0aa12377c99283d8fd89a97661d64b7d1bd1dc9
- Size
  
  316KB
- MD5
  
  9a5a313dbacdfc68028447d26edf615f
- SHA1
  
  925adb9178a8534f31020d0c7770ec64ddd546e2
- SHA256
  
  33691c32ca343d5b2594023cb0aa12377c99283d8fd89a97661d64b7d1bd1dc9
- SHA512
  
  c0dc9ff7a4ea4caf2b423c07c2f98f9545b92228e07456d2ce6c02edb6d798285478b947c57ebeecd4272f849e984007cbfdb1cfaf14202f7e87e475b3b8ffd5
- SSDEEP
  
  6144:kEUGyPNs/0SxfioredWL8ExpZkMBH60A:kEUGys0kfgdWLfpZkM
Score

10^/10

emotet epoch3 banker discovery trojan
- Emotet
  Emotet is a trojan that is primarily spread through spam emails.
  trojan banker emotet
- Emotet family
  emotet
- Emotet payload
  Detects Emotet payload in memory.
  trojan banker
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

1

T1614

System Language Discovery

1

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Extracted

Targets

Emotet family

Emotet payload

MITRE ATT&CK Enterprise v15

Tasks

static1

behavioral1

behavioral2