Overview

overview

10

Static

static

10

emotet.dll

windows7-x64

10

emotet.dll

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    emotet

  • Size

    144KB

  • Sample

    230317-sclefagg57

  • MD5

    939198ab85520f8fa042349eb83d64d1

  • SHA1

    3e8c0f7e6e55f5fece2339ec9c4c52cf9270e582

  • SHA256

    0c681fdfe86923929453a713de6b2bf30fabe979ca0130f8a0a75a77a5c015f6

  • SHA512

    b478d4d2841a4ba0a4e021caf21fd7c07b75b51efe514d2c226313a45f89d2e3ff322f3bebfd53d97c0cb28c9383dbca5f3616dcabc1ac3f678d7de4f8e11272

  • SSDEEP

    3072:t+DIgZx6B1Bx4Megsbd26KkltYBw91mH67rc8Xw4vQobyU:Gz6BW7bw6ZlKBwnmHaotpSyU

Score
10/10
emotetepoch5bankertrojan

Malware Config

Extracted

Family

emotet

Botnet

Epoch5

C2

51.178.61.60:443

168.197.250.14:80

45.79.33.48:8080

196.44.98.190:8080

177.72.80.14:7080

51.210.242.234:8080

185.148.169.10:8080

142.4.219.173:8080

78.47.204.80:443

78.46.73.125:443

37.44.244.177:8080

37.59.209.141:8080

191.252.103.16:80

54.38.242.185:443

85.214.67.203:8080

54.37.228.122:443

207.148.81.119:8080

195.77.239.39:8080

66.42.57.149:443

195.154.146.35:443
eck1.plain
ecs1.plain

Targets

    • Target

      emotet

    • Size

      144KB

    • MD5

      939198ab85520f8fa042349eb83d64d1

    • SHA1

      3e8c0f7e6e55f5fece2339ec9c4c52cf9270e582

    • SHA256

      0c681fdfe86923929453a713de6b2bf30fabe979ca0130f8a0a75a77a5c015f6

    • SHA512

      b478d4d2841a4ba0a4e021caf21fd7c07b75b51efe514d2c226313a45f89d2e3ff322f3bebfd53d97c0cb28c9383dbca5f3616dcabc1ac3f678d7de4f8e11272

    • SSDEEP

      3072:t+DIgZx6B1Bx4Megsbd26KkltYBw91mH67rc8Xw4vQobyU:Gz6BW7bw6ZlKBwnmHaotpSyU

    Score
    10/10
    emotetepoch5bankertrojan

    • Emotet

      Emotet is a trojan that is primarily spread through spam emails.

      trojanbankeremotet

    • Blocklisted process makes network request

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks