Overview

overview

10

Static

static

1

1gpj9zFK.dll

windows7-x64

10

1gpj9zFK.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    oKBi.zip

  • Size

    836KB

  • Sample

    230314-ypzqgshf34

  • MD5

    804d5a3f49102ec0b4ed2649a6deeb27

  • SHA1

    87cd21bab4f7f557538019faf9c88866c7379e98

  • SHA256

    5c4bd4d36082e4838eeaf282fef9ad95689f8e1944cf2d300ecc2461c6f9c88e

  • SHA512

    681d6ac5e4cf2c452203c28ebf0f8a595052b0bf0b13716b2705489b679d5ed645cf5cfeeb2315a9856cb5b3f8d83ea7e9616701b7c9c49581b501a721b3c807

  • SSDEEP

    6144:OYc1c+lzN0G5Qm0Twmv0ficwLrXujWdnE0gXKA8sAeNCl:Oli+j08UpWfIXujWplsA/

Score
10/10
emotetepoch5bankerpersistencetrojan

Malware Config

Extracted

Family

emotet

Botnet

Epoch5

C2

103.85.95.4:8080

103.224.241.74:8080

178.238.225.252:8080

37.59.103.148:8080

78.47.204.80:443

138.197.14.67:8080

128.199.242.164:8080

54.37.228.122:443

37.44.244.177:8080

139.59.80.108:8080

218.38.121.17:443

82.98.180.154:7080

114.79.130.68:443

159.65.135.222:7080

174.138.33.49:7080

195.77.239.39:8080

193.194.92.175:443

198.199.70.22:8080

85.214.67.203:8080

93.84.115.205:7080
ecs1.plain
eck1.plain

Targets

    • Target

      1gpj9zFK.dll

    • Size

      543.5MB

    • MD5

      b2cc0f3ae3052df9130e34777e518e91

    • SHA1

      5ff0b9c01d29198fe9eeabc95bff2b4ba8db3c64

    • SHA256

      9d309c150ee4f16dd73f559e0b6427ce5da5c3ce2f27c00232550fa5f72c2370

    • SHA512

      c7e3817bad8195ac2d69b1bdb0ea7da1cb7d09cb2c0ee64c074f37eacd782bbd52b83de1b25eace8460b57a6830cdc2d81102e1e6b977fb31a0e8ef9669e76fe

    • SSDEEP

      6144:fS+sfPZYZOdngAieP+GzBiWmLcipb1v/33R7U2h2ARWvpiOhbeinCSEVLcLwdi:fbUZYFP4iDcidBhVh2ARMiSCSEb

    Score
    10/10
    emotetepoch5bankertrojanpersistence
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

1
T1060

Privilege Escalation

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks