emotet

General

Target

2025-02-04_464e52959872de904f0d58bc7739a52e_icedid
Size

316KB
Sample

250204-z8961asrbv
MD5

464e52959872de904f0d58bc7739a52e
SHA1

15043ca6d0bbbcf878420862630d22dab4c1930b
SHA256

8c6b5751999852739494c64bdfcf15643093e0f77ce4740d81bc1080a006088d
SHA512

46f65a1faa835a96adcd3c4f4ed2f36a1f02127d4f3c5f2f1d36692d19adbd0841faa4d5bc7833a25eb25abef05fa1156404b87679a68475f3aa9cb824719f77
SSDEEP

6144:juYjzcrl7TTFAk9mWvBwJ+1kyUbasEBzD3cqGwdqPyr6s98i9s+:juYgTFBgMKQkp4f3cqZF2i2+

Score

10^/10

Malware Config

Extracted

Family

emotet

Botnet

Epoch2

C2

185.155.20.82:80

82.223.70.24:8080

58.171.38.26:80

103.86.49.11:8080

31.31.77.83:443

92.222.216.44:8080

186.208.123.210:443

136.243.205.112:7080

60.130.173.117:80

160.16.215.66:8080

98.15.140.226:80

162.241.92.219:8080

78.186.5.109:443

87.127.197.7:8080

168.235.67.138:7080

210.56.10.58:80

60.250.78.22:443

114.145.241.208:80

104.131.11.150:443

62.75.141.82:80

rsa_pubkey.plain

Targets

- Target
  
  2025-02-04_464e52959872de904f0d58bc7739a52e_icedid
- Size
  
  316KB
- MD5
  
  464e52959872de904f0d58bc7739a52e
- SHA1
  
  15043ca6d0bbbcf878420862630d22dab4c1930b
- SHA256
  
  8c6b5751999852739494c64bdfcf15643093e0f77ce4740d81bc1080a006088d
- SHA512
  
  46f65a1faa835a96adcd3c4f4ed2f36a1f02127d4f3c5f2f1d36692d19adbd0841faa4d5bc7833a25eb25abef05fa1156404b87679a68475f3aa9cb824719f77
- SSDEEP
  
  6144:juYjzcrl7TTFAk9mWvBwJ+1kyUbasEBzD3cqGwdqPyr6s98i9s+:juYgTFBgMKQkp4f3cqZF2i2+
Score

10^/10

emotet epoch2 banker discovery trojan
- Emotet
  Emotet is a trojan that is primarily spread through spam emails.
  trojan banker emotet
- Emotet family
  emotet
- Executes dropped EXE
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

1

T1082

System Location Discovery

1

T1614

System Language Discovery

1

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Extracted

Targets

Emotet family

Executes dropped EXE

Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks

static1

behavioral1

behavioral2