Overview

overview

10

Static

static

c5949decdc...3d.exe

windows7_x64

10

c5949decdc...3d.exe

windows10_x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    c5949decdc98c1d39c8a0d780b26ab205f6bdae073c8454ef7e5b51eb2faa93d
  • Size 276KB
  • Sample200706-v814fdrff6
  • SHA256 c5949decdc98c1d39c8a0d780b26ab205f6bdae073c8454ef7e5b51eb2faa93d
  • MD5 SHA1 SHA512
Score
10/10
emotetepoch1bankertrojan

Malware Config

Extracted

Family

  • emotet

Botnet

  • Epoch1

C2

  • 219.92.13.25:80

  • 91.236.4.234:443

  • 192.241.143.52:8080

  • 186.3.232.68:80

  • 192.241.146.84:8080

  • 12.162.84.2:8080

  • 50.28.51.143:8080

  • 221.133.46.86:443

  • 185.94.252.27:443

  • 114.109.179.60:80

  • 186.33.141.88:80

  • 172.104.169.32:8080

  • 184.57.130.8:80

  • 177.139.131.143:443

  • 77.55.211.77:8080

  • 81.169.202.3:443

  • 72.47.248.48:7080

  • 212.71.237.140:8080

  • 190.229.148.144:80

  • 178.79.163.131:8080

rsa_pubkey.plain

Targets

    • Target
      c5949decdc98c1d39c8a0d780b26ab205f6bdae073c8454ef7e5b51eb2faa93d
    • Size 276KB
    • SHA256 c5949decdc98c1d39c8a0d780b26ab205f6bdae073c8454ef7e5b51eb2faa93d
    • MD5 SHA1 SHA512
    Score
    10/10
    trojanbankeremotet

    • Emotet

      Emotet is a trojan that is primarily spread through spam emails.

      trojanbankeremotet
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks