Overview

overview

10

Static

static

3

e9e5209ff9...1b.exe

windows10-ltsc_2021-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    e9e5209ff937e49e34e4c17419aad97b3931cd189a7f28333385c6fe9eef561b.exe
  • Size 324KB
  • Sample260925-t8sn3awset
  • SHA256 e9e5209ff937e49e34e4c17419aad97b3931cd189a7f28333385c6fe9eef561b
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
emotetepoch1bankerdiscoverytrojan

Malware Config

Extracted

Family

  • emotet

Botnet

  • Epoch1

C2

  • 181.10.204.106:80

  • 91.236.4.234:443

  • 172.104.169.32:8080

  • 94.176.234.118:443

  • 114.109.179.60:80

  • 68.183.190.199:8080

  • 91.83.93.124:7080

  • 143.0.87.101:80

  • 12.162.84.2:8080

  • 185.94.252.12:80

  • 2.47.112.152:80

  • 190.57.130.142:443

  • 177.139.131.143:443

  • 186.68.48.204:443

  • 203.122.18.234:8080

  • 200.69.224.73:80

  • 164.77.130.222:80

  • 178.79.163.131:8080

  • 212.71.237.140:8080

  • 202.62.39.111:80

rsa_pubkey.plain

Targets

    • Target
      e9e5209ff937e49e34e4c17419aad97b3931cd189a7f28333385c6fe9eef561b.exe
    • Size 324KB
    • SHA256 e9e5209ff937e49e34e4c17419aad97b3931cd189a7f28333385c6fe9eef561b
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    10/10
    bankerepoch1discoveryemotettrojan

    • Family: Emotet

      Emotet is a trojan that is primarily spread through spam emails.

      trojanbankeremotet
    behavioral1

MITRE ATT&CK Enterprise v16

Tasks