MITRE ATT&CKsoftware (malware)
S0367 Emotet
- Domain
- enterprise
- Platforms
- Windows
- Aliases
- Geodo
- Version
- 1.7
- Created
- 2019-03-25
Description
Related
Uses · MITRE ATT&CK (47)
- T1027.013 Encrypted/Encoded File sub-technique
- T1016.002 Wi-Fi Discovery sub-technique
- T1027.010 Command Obfuscation sub-technique
- T1027.009 Embedded Payloads sub-technique
- T1620 Reflective Code Loading technique
- T1573 Encrypted Channel technique
- T1573.001 Symmetric Cryptography sub-technique
- T1071.001 Web Protocols sub-technique
- T1132.001 Standard Encoding sub-technique
- T1571 Non-Standard Port technique
- T1078.003 Local Accounts sub-technique
- T1204.001 Malicious Link sub-technique
- T1204.002 Malicious File sub-technique
- T1570 Lateral Tool Transfer technique
- T1059.001 PowerShell sub-technique
- T1059.003 Windows Command Shell sub-technique
- T1059.005 Visual Basic sub-technique
- T1566.001 Spearphishing Attachment sub-technique
- T1566.002 Spearphishing Link sub-technique
- T1087.003 Email Account sub-technique
- T1114.001 Local Email Collection sub-technique
- T1134.001 Token Impersonation/Theft sub-technique
- T1555.003 Credentials from Web Browsers sub-technique
- T1003.001 LSASS Memory sub-technique
- T1021.002 SMB/Windows Admin Shares sub-technique
- T1110.001 Password Guessing sub-technique
- T1036.004 Masquerade Task or Service sub-technique
- T1027.001 Binary Padding sub-technique
- T1027.002 Software Packing sub-technique
- T1552.001 Credentials In Files sub-technique
Referenced by MITRE ATT&CK · uses (1)
- G0102 Wizard Spider group
References
- https://blog.talosintelligence.com/2019/01/return-of-emotet.html Talos Emotet Jan 2019
- https://www.cisecurity.org/blog/emotet-changes-ttp-and-arrives-in-united-states/ CIS Emotet Apr 2017
- https://www.cisecurity.org/white-papers/ms-isac-security-primer-emotet/ CIS Emotet Dec 2018
- https://redcanary.com/blog/stopping-emotet-before-it-moves-laterally/ Red Canary Emotet Feb 2019
- https://www.welivesecurity.com/2018/11/09/emotet-launches-major-new-spam-campaign/ ESET Emotet Nov 2018
- https://www.secureworks.com/blog/lazy-passwords-become-rocket-fuel-for-emotet-smb-spreader Secureworks Emotet Nov 2018
- https://www.picussecurity.com/blog/the-christmas-card-you-never-wanted-a-new-wave-of-emotet-is-back-to-wreak-havoc.html Picus Emotet Dec 2018
- https://blog.trendmicro.com/trendlabs-security-intelligence/new-banking-malware-uses-network-sniffing-for-data-theft/ Trend Micro Banking Malware Jan 2019
- https://securelist.com/the-banking-trojan-emotet-detailed-analysis/69560/ Kaspersky Emotet Jan 2019
- https://support.malwarebytes.com/docs/DOC-2295 Malwarebytes Emotet Dec 2017
- https://www.symantec.com/blogs/threat-intelligence/evolution-emotet-trojan-distributor Symantec Emotet Jul 2018
- https://documents.trendmicro.com/assets/white_papers/ExploringEmotetsActivities_Final.pdf Trend Micro Emotet Jan 2019
- https://www.us-cert.gov/ncas/alerts/TA18-201A US-CERT Emotet Jul 2018