Triage | Malware sandboxing report by Hatching Triage

Resubmissions

27-01-2022 11:13

220127-nbxzmabhc4 10

18-01-2022 01:25

220118-bsxzqsfad5 10

15-01-2022 16:15

220115-tp8wyafbej 1

Sharing

General

Target

test.dll
Size

574KB
Sample

220118-bsxzqsfad5
MD5

653d1f7df97c7be3a887b4d860a0a5b9
SHA1

6acbcb4c9c9d574454ae971c49b1d09257df43d9
SHA256

b6736050938db1c2cd9ed705c9233d90e9876cea67b0d7cc4644d92ac7cb6e20
SHA512

3f769448831ea107b02ce9f9fb189605ad2acf804a649e7e565dae3335a505683a7d756d89bd92ecc1dc720f708b989fa87598a17dc071621a87346e4b8f6125

Score

10^/10

emotet epoch5 banker trojan

Malware Config

Extracted

Family	emotet
Botnet	Epoch5
C2	45.138.98.34:80 69.16.218.101:8080 51.210.242.234:8080 185.148.168.220:8080 142.4.219.173:8080 54.38.242.185:443 191.252.103.16:80 104.131.62.48:8080 62.171.178.147:8080 217.182.143.207:443 168.197.250.14:80 37.44.244.177:8080 66.42.57.149:443 210.57.209.142:8080 159.69.237.188:443 116.124.128.206:8080 128.199.192.135:8080 195.154.146.35:443 185.148.168.15:8080 195.77.239.39:8080 207.148.81.119:8080 85.214.67.203:8080 190.90.233.66:443 78.46.73.125:443 78.47.204.80:443 37.59.209.141:8080 54.37.228.122:443 45.138.98.34:80 69.16.218.101:8080 51.210.242.234:8080 185.148.168.220:8080 142.4.219.173:8080 54.38.242.185:443 191.252.103.16:80 104.131.62.48:8080 62.171.178.147:8080 217.182.143.207:443 168.197.250.14:80 37.44.244.177:8080 66.42.57.149:443 210.57.209.142:8080 159.69.237.188:443 116.124.128.206:8080 128.199.192.135:8080 195.154.146.35:443 185.148.168.15:8080 195.77.239.39:8080 207.148.81.119:8080 85.214.67.203:8080 190.90.233.66:443 78.46.73.125:443 78.47.204.80:443 37.59.209.141:8080 54.37.228.122:443
eck1.plain
ecs1.plain

Targets

- Target
  
  test.dll
- Size
  
  574KB
- MD5
  
  653d1f7df97c7be3a887b4d860a0a5b9
- SHA1
  
  6acbcb4c9c9d574454ae971c49b1d09257df43d9
- SHA256
  
  b6736050938db1c2cd9ed705c9233d90e9876cea67b0d7cc4644d92ac7cb6e20
- SHA512
  
  3f769448831ea107b02ce9f9fb189605ad2acf804a649e7e565dae3335a505683a7d756d89bd92ecc1dc720f708b989fa87598a17dc071621a87346e4b8f6125
Score

10^/10

emotet epoch5 banker trojan
- Emotet
  Emotet is a trojan that is primarily spread through spam emails.
  trojan banker emotet
behavioral1 behavioral2

MITRE ATT&CK Matrix

Collection

Command and Control

Credential Access

Defense Evasion

Discovery

Execution

Exfiltration

Impact

Initial Access

Lateral Movement

Persistence

Privilege Escalation

Tasks

static1

behavioral1

emotetepoch5bankertrojan

behavioral2