Overview

overview

10

Static

static

50c9cbb46c...93.exe

windows7_x64

10

50c9cbb46c...93.exe

windows10_x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    50c9cbb46ccd91f38b3bbcef3686cfaf01eb1149b13e34083a52caa2fb9c8093
  • Size 347KB
  • Sample201109-aswf78md9e
  • SHA256 50c9cbb46ccd91f38b3bbcef3686cfaf01eb1149b13e34083a52caa2fb9c8093
  • MD5 SHA1 SHA512
Score
10/10
emotetepoch2bankertrojan

Malware Config

Extracted

Family

  • emotet

Botnet

  • Epoch2

C2

  • 162.154.38.103:80

  • 95.216.118.202:8080

  • 60.250.78.22:443

  • 120.151.135.224:80

  • 101.187.97.173:80

  • 185.94.252.104:443

  • 168.235.67.138:7080

  • 103.86.49.11:8080

  • 92.222.216.44:8080

  • 190.160.53.126:80

  • 31.31.77.83:443

  • 195.244.215.206:80

  • 5.196.74.210:8080

  • 79.45.112.220:80

  • 41.60.200.34:80

  • 95.213.236.64:8080

  • 5.39.91.110:7080

  • 58.171.38.26:80

  • 209.151.248.242:8080

  • 178.20.74.212:80

rsa_pubkey.plain

Targets

    • Target
      50c9cbb46ccd91f38b3bbcef3686cfaf01eb1149b13e34083a52caa2fb9c8093
    • Size 347KB
    • SHA256 50c9cbb46ccd91f38b3bbcef3686cfaf01eb1149b13e34083a52caa2fb9c8093
    • MD5 SHA1 SHA512
    Score
    10/10
    emotetepoch2bankertrojan

    • Emotet

      Emotet is a trojan that is primarily spread through spam emails.

      trojanbankeremotet
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks