General
-
Target
49b6a91ea8617042fc5658eb7bc63883ab63253d168219d7b8ac5300c72e2080
-
Size
653KB
-
Sample
211125-tzwdlabbb5
-
MD5
ded41dc44f65e6d6225188590697d3d6
-
SHA1
ae07c07f550a5c6b5c01901c473ebeb952d13d2d
-
SHA256
49b6a91ea8617042fc5658eb7bc63883ab63253d168219d7b8ac5300c72e2080
-
SHA512
a24c3cac4e163ac0b5d15a47a77d1354ae2cd7437417645f8a8bad482dc1f1fb02fdd12f4be0d5ebde59a99661cc1b53bb2459548fdaf3abbc2b6ffb9dcdc0b9
Static task
static1
Behavioral task
behavioral1
Sample
49b6a91ea8617042fc5658eb7bc63883ab63253d168219d7b8ac5300c72e2080.dll
Resource
win10-de-20211104
Malware Config
Extracted
emotet
Epoch5
51.178.61.60:443
168.197.250.14:80
45.79.33.48:8080
196.44.98.190:8080
177.72.80.14:7080
51.210.242.234:8080
185.148.169.10:8080
142.4.219.173:8080
78.47.204.80:443
78.46.73.125:443
37.44.244.177:8080
37.59.209.141:8080
191.252.103.16:80
54.38.242.185:443
85.214.67.203:8080
54.37.228.122:443
207.148.81.119:8080
195.77.239.39:8080
66.42.57.149:443
195.154.146.35:443
Targets
-
-
Target
49b6a91ea8617042fc5658eb7bc63883ab63253d168219d7b8ac5300c72e2080
-
Size
653KB
-
MD5
ded41dc44f65e6d6225188590697d3d6
-
SHA1
ae07c07f550a5c6b5c01901c473ebeb952d13d2d
-
SHA256
49b6a91ea8617042fc5658eb7bc63883ab63253d168219d7b8ac5300c72e2080
-
SHA512
a24c3cac4e163ac0b5d15a47a77d1354ae2cd7437417645f8a8bad482dc1f1fb02fdd12f4be0d5ebde59a99661cc1b53bb2459548fdaf3abbc2b6ffb9dcdc0b9
Score10/10-
Registers COM server for autorun
-
Blocklisted process makes network request
-
Drops file in System32 directory
-