emotet

General

Target

2025-01-11_01a257d782eaf3c8ed377a4348b18b30_icedid
Size

448KB
Sample

250111-mfcntawnax
MD5

01a257d782eaf3c8ed377a4348b18b30
SHA1

511d53d5481c25a12c197ed86fbf2a4356fcba2d
SHA256

161a956d046adcdd6a33019403d529367a4f6c782b284bd4fb564661fc9e63c3
SHA512

0e868d7aca2658054394ef4a3e6bd7eb73a78920d6c15edc86351e76f7159cc9b67befd8465d461447826debc8b2fc91cffd273ed942037ab49a223a5de9874a
SSDEEP

6144:1oRPSh8ci4yzgAnoEt7kJTrxkQ2qKib+PiDnVEPAlvsASuwbiyc4sSE5Zi:EPSCciiAnoEt7Cr9rbBhEPAyD5BH

Score

10^/10

Malware Config

Extracted

Family

emotet

Botnet

Epoch3

C2

126.126.139.26:443

192.175.111.217:7080

195.181.215.65:4143

75.127.14.170:8080

37.205.9.252:7080

41.185.29.128:8080

190.194.12.132:80

192.210.217.94:8080

79.133.6.236:8080

24.231.51.190:80

203.153.216.178:7080

128.106.187.110:80

172.96.190.154:8080

113.161.148.81:80

139.59.12.63:8080

116.91.240.96:80

73.55.128.120:80

37.46.129.215:8080

109.13.179.195:80

118.243.83.70:80

rsa_pubkey.plain

Targets

- Target
  
  2025-01-11_01a257d782eaf3c8ed377a4348b18b30_icedid
- Size
  
  448KB
- MD5
  
  01a257d782eaf3c8ed377a4348b18b30
- SHA1
  
  511d53d5481c25a12c197ed86fbf2a4356fcba2d
- SHA256
  
  161a956d046adcdd6a33019403d529367a4f6c782b284bd4fb564661fc9e63c3
- SHA512
  
  0e868d7aca2658054394ef4a3e6bd7eb73a78920d6c15edc86351e76f7159cc9b67befd8465d461447826debc8b2fc91cffd273ed942037ab49a223a5de9874a
- SSDEEP
  
  6144:1oRPSh8ci4yzgAnoEt7kJTrxkQ2qKib+PiDnVEPAlvsASuwbiyc4sSE5Zi:EPSCciiAnoEt7Cr9rbBhEPAyD5BH
Score

10^/10

emotet epoch3 banker discovery trojan
- Emotet
  Emotet is a trojan that is primarily spread through spam emails.
  trojan banker emotet
- Emotet family
  emotet
- Emotet payload
  Detects Emotet payload in memory.
  trojan banker
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

1

T1614

System Language Discovery

1

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Extracted

Targets

Emotet family

Emotet payload

MITRE ATT&CK Enterprise v15

Tasks

static1

behavioral1

behavioral2