Overview

overview

10

Static

static

1

2f39c28799...53.dll

windows7-x64

10

2f39c28799...53.dll

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    2f39c2879989ddd7f9ecf52b6232598e5595f8bf367846ff188c9dfbf1251253

  • Size

    309KB

  • Sample

    230315-3xeshafh95

  • MD5

    bfc060937dc90b273eccb6825145f298

  • SHA1

    c156c00c7e918f0cb7363614fb1f177c90d8108a

  • SHA256

    2f39c2879989ddd7f9ecf52b6232598e5595f8bf367846ff188c9dfbf1251253

  • SHA512

    cc1fee19314b0a0f9e292fa84f6e98f087033d77db937848dda1da0c88f49997866cba5465df04bf929b810b42fdb81481341064c4565c9b6272fa7f3b473ac5

  • SSDEEP

    6144:cwNQMQTlfdUPABVy559hhR3iP7TfPYbrF1EFVw0todxKROsCt:rNbadDBkZ6rPeEFizdxxsCt

Score
10/10
emotetepoch4bankerpersistencetrojan

Malware Config

Extracted

Family

emotet

Botnet

Epoch4

C2

164.68.99.3:8080

164.90.222.65:443

186.194.240.217:443

1.234.2.232:8080

103.75.201.2:443

187.63.160.88:80

147.139.166.154:8080

91.207.28.33:8080

5.135.159.50:443

153.92.5.27:8080

213.239.212.5:443

103.43.75.120:443

159.65.88.10:8080

167.172.253.162:8080

153.126.146.25:7080

119.59.103.152:8080

107.170.39.149:8080

183.111.227.137:8080

159.89.202.34:443

110.232.117.186:8080
eck1.plain
ecs1.plain

Targets

    • Target

      2f39c2879989ddd7f9ecf52b6232598e5595f8bf367846ff188c9dfbf1251253

    • Size

      309KB

    • MD5

      bfc060937dc90b273eccb6825145f298

    • SHA1

      c156c00c7e918f0cb7363614fb1f177c90d8108a

    • SHA256

      2f39c2879989ddd7f9ecf52b6232598e5595f8bf367846ff188c9dfbf1251253

    • SHA512

      cc1fee19314b0a0f9e292fa84f6e98f087033d77db937848dda1da0c88f49997866cba5465df04bf929b810b42fdb81481341064c4565c9b6272fa7f3b473ac5

    • SSDEEP

      6144:cwNQMQTlfdUPABVy559hhR3iP7TfPYbrF1EFVw0todxKROsCt:rNbadDBkZ6rPeEFizdxxsCt

    Score
    10/10
    emotetepoch4bankertrojanpersistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks