Overview

overview

10

Static

static

tfvxeurehkyz.wut.dll

windows7_x64

10

tfvxeurehkyz.wut.dll

windows10_x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    tfvxeurehkyz.wut
  • Size 404KB
  • Sample210126-13k64pez2a
  • SHA256 a9c68d527223db40014d067cf4fdae5be46cca67387e9cfdff118276085f23ef
  • MD5 SHA1 SHA512
Score
10/10
emotetleabankertrojan

Malware Config

Extracted

Family

  • emotet

Botnet

  • LEA

C2

  • 80.158.3.161:443

  • 80.158.51.209:8080

  • 80.158.35.51:80

  • 80.158.63.78:443

  • 80.158.53.167:80

  • 80.158.62.194:443

  • 80.158.59.174:8080

  • 80.158.43.136:80

rsa_pubkey.plain

Targets

    • Target
      tfvxeurehkyz.wut
    • Size 404KB
    • SHA256 a9c68d527223db40014d067cf4fdae5be46cca67387e9cfdff118276085f23ef
    • MD5 SHA1 SHA512
    Score
    10/10
    emotetleabankertrojan

    • Emotet

      Emotet is a trojan that is primarily spread through spam emails.

      trojanbankeremotet

    • Blocklisted process makes network request

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks