Overview

overview

10

Static

static

1

7bdd1409b0...0b.exe

windows7-x64

10

7bdd1409b0...0b.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    7bdd1409b080eb8510163cea3761d694be0eaec7e22bc44736cbfbc3025a310b.zip

  • Size

    283KB

  • Sample

    230222-sywsaseb5y

  • MD5

    5d403cd47dbc59664227cecbaca346b4

  • SHA1

    0c839d6eadb9ed39d728d6b39655d4a45c2672ff

  • SHA256

    8d6a1bb0dd18527f18c7811e956decf09992d6569bf93f6905d0e8466824173e

  • SHA512

    63050d85f4f104b8806867ec00588800c4dcb68d12fd808428f0f5cd6ad35e42840d451edd317411903b884b09e8fab29c65a229826a610450982c02ae1e3992

  • SSDEEP

    6144:UJGXgD5Oflur8a+mS70XOJYZ3FidJNLUqBvbWKIbKKUwCDuW02bPNG7:UH5OfUrMX0XkYwDwqBDWOKU/DuvYc7

Score
10/10
emotetepoch2bankertrojan

Malware Config

Extracted

Family

emotet

Botnet

Epoch2

C2

186.75.241.230:80

181.143.194.138:443

181.143.53.227:21

85.104.59.244:20

80.11.163.139:443

167.71.10.37:8080

104.131.44.150:8080

185.187.198.15:80

133.167.80.63:7080

198.199.114.69:8080

144.139.247.220:80

152.89.236.214:8080

78.24.219.147:8080

92.222.216.44:8080

46.105.131.87:80

190.226.44.20:21

182.176.132.213:8090

85.54.169.141:8080

192.81.213.192:8080

101.187.237.217:20
rsa_pubkey.plain

Targets

    • Target

      7bdd1409b080eb8510163cea3761d694be0eaec7e22bc44736cbfbc3025a310b.exe

    • Size

      540KB

    • MD5

      28cfd8a6b63836e39fc10c87ee7ec59d

    • SHA1

      7ace13d7b698ca6fa87ef337237893424503bde7

    • SHA256

      7bdd1409b080eb8510163cea3761d694be0eaec7e22bc44736cbfbc3025a310b

    • SHA512

      0de6451ccbc936e3eebead59447ea803a012b8774d7622a9822d59cfab1400ce0345da8cfb729c76a3b4fc1cd5775183e0a43289a5f428a31bb86ddf91718862

    • SSDEEP

      12288:ry5iow33myVaf/mhy4h0gTLL/niHDpWuOthr+RMp:6i/Hm6xhyLgHrni0H

    Score
    10/10
    emotetepoch2bankertrojan

    • Emotet

      Emotet is a trojan that is primarily spread through spam emails.

      trojanbankeremotet

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

1
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks