emotet

General

Target

158aed92da3bfe57b784e95bed3eea8a89661586fd6e5dc9af2a03f6ba741140
Size

138KB
Sample

250110-y589vswjdw
MD5

7ea5360f2a590a030ce63d88eb7dcf8f
SHA1

b2750f361211e8eafb984cf9cc2b73c47251f385
SHA256

158aed92da3bfe57b784e95bed3eea8a89661586fd6e5dc9af2a03f6ba741140
SHA512

4036e468b59d1ac85dcf1ed8377f63824ea22ae55ad2fc4beba9bb213d33b575844b2b97b8e7fb3e6f51366467195e2fb8f8b90e3b00cea5cf54a324f009b151
SSDEEP

3072:c1ROMLJ/ogu1pMQWqNgL4xuEQsxqCXMi/fNqsfkk9N+zc:cnOMFowQWqi6LQCpXNFkeNy

Score

10^/10

Malware Config

Extracted

Family

emotet

Botnet

Epoch3

C2

183.77.227.38:80

45.177.120.36:80

162.241.41.111:7080

190.85.46.52:7080

54.38.143.245:8080

139.59.61.215:443

202.166.170.43:80

37.46.129.215:8080

120.51.34.254:80

113.160.248.110:80

27.73.70.219:8080

46.105.131.68:8080

88.247.58.26:80

46.32.229.152:8080

195.201.56.70:8080

93.20.157.143:80

103.48.68.173:80

167.71.227.113:8080

8.4.9.137:8080

172.96.190.154:8080

rsa_pubkey.plain

Targets

- Target
  
  158aed92da3bfe57b784e95bed3eea8a89661586fd6e5dc9af2a03f6ba741140
- Size
  
  138KB
- MD5
  
  7ea5360f2a590a030ce63d88eb7dcf8f
- SHA1
  
  b2750f361211e8eafb984cf9cc2b73c47251f385
- SHA256
  
  158aed92da3bfe57b784e95bed3eea8a89661586fd6e5dc9af2a03f6ba741140
- SHA512
  
  4036e468b59d1ac85dcf1ed8377f63824ea22ae55ad2fc4beba9bb213d33b575844b2b97b8e7fb3e6f51366467195e2fb8f8b90e3b00cea5cf54a324f009b151
- SSDEEP
  
  3072:c1ROMLJ/ogu1pMQWqNgL4xuEQsxqCXMi/fNqsfkk9N+zc:cnOMFowQWqi6LQCpXNFkeNy
Score

10^/10

emotet epoch3 banker discovery trojan
- Emotet
  Emotet is a trojan that is primarily spread through spam emails.
  trojan banker emotet
- Emotet family
  emotet
- Emotet payload
  Detects Emotet payload in memory.
  trojan banker
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

1

T1614

System Language Discovery

1

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Extracted

Targets

Emotet family

Emotet payload

MITRE ATT&CK Enterprise v15

Tasks

static1

behavioral1

behavioral2