Overview

overview

10

Static

static

issxtxng.dll

windows7_x64

10

issxtxng.dll

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    issxtxng

  • Size

    612KB

  • Sample

    220404-d3d1qahhe8

  • MD5

    a631883d397ad88c0744e4405a66a1ab

  • SHA1

    a95c8dd6b8a275d3360799a632a3ab71dc4bc0f9

  • SHA256

    2bf2f5f5fb6a3c64dfc092635d375da850b403c35fadabe4d74377d1c2b77938

  • SHA512

    09b42a766077a14f802d7a1aee64a4e24166b3e1ea1438138e990e9508b70960b96230946cc2955e92986c93c1c12ab5bad629831592c24587abdf2ede02db83

Score
10/10
emotetepoch4bankertrojan

Malware Config

Extracted

Family

emotet

Botnet

Epoch4

C2

70.36.102.35:443

92.240.254.110:8080

51.91.76.89:8080

217.182.25.250:8080

119.193.124.41:7080

45.142.114.231:8080

176.56.128.118:443

51.254.140.238:7080

173.212.193.249:8080

131.100.24.231:80

188.44.20.25:443

1.234.2.232:8080

153.126.146.25:7080

51.91.7.5:8080

151.106.112.196:8080

46.55.222.11:443

107.182.225.142:8080

82.165.152.127:8080

212.237.17.99:8080

195.201.151.129:8080
eck1.plain
ecs1.plain

Targets

    • Target

      issxtxng

    • Size

      612KB

    • MD5

      a631883d397ad88c0744e4405a66a1ab

    • SHA1

      a95c8dd6b8a275d3360799a632a3ab71dc4bc0f9

    • SHA256

      2bf2f5f5fb6a3c64dfc092635d375da850b403c35fadabe4d74377d1c2b77938

    • SHA512

      09b42a766077a14f802d7a1aee64a4e24166b3e1ea1438138e990e9508b70960b96230946cc2955e92986c93c1c12ab5bad629831592c24587abdf2ede02db83

    Score
    10/10
    emotetepoch4bankertrojan

    • Emotet

      Emotet is a trojan that is primarily spread through spam emails.

      trojanbankeremotet

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks