Overview

overview

10

Static

static

1

scxNRbSkPfKNRA.dll

windows7-x64

10

scxNRbSkPfKNRA.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    QpDlV8CggJeIE2aXDmXSPqRuuK9LK3O.zip

  • Size

    963KB

  • Sample

    230328-p2sy2acg2y

  • MD5

    96330717a263c307cbc15e2efb6e0b14

  • SHA1

    ee3946184ea7519ff77523c2c03f190b44bd0a13

  • SHA256

    1619d95473545836b1d77c3052cea6e8a5c2a1e016ebcbd6efb7ae6604d3b83d

  • SHA512

    51ab7dc2f9ed6ad26c5bfb7dac14eea864dfefca25f72fe0eacc387f4b59e4414d2aaa4677bffaf2014c450c75140e87bd14ff5b6eb57452dad4e527edbf09ab

  • SSDEEP

    12288:Kkf5dOzheNdckFRKluvnRHXdhbDHfXZX1EKdxKmSTH4det:ZXzNdfKluvnRHthzfoYxJl6

Score
10/10
emotetepoch4bankerpersistencetrojan

Malware Config

Extracted

Family

emotet

Botnet

Epoch4

C2

213.239.212.5:443

129.232.188.93:443

103.43.75.120:443

197.242.150.244:8080

1.234.2.232:8080

110.232.117.186:8080

95.217.221.146:8080

159.89.202.34:443

159.65.88.10:8080

82.223.21.224:8080

169.57.156.166:8080

45.176.232.124:443

45.235.8.30:8080

173.212.193.249:8080

107.170.39.149:8080

119.59.103.152:8080

167.172.199.165:8080

91.207.28.33:8080

185.4.135.165:8080

104.168.155.143:8080
eck1.plain
ecs1.plain

Targets

    • Target

      scxNRbSkPfKNRA.dll

    • Size

      523.9MB

    • MD5

      32ec97bbc9826ee88697362023ba68ed

    • SHA1

      3ec2429c7e2713b0f9f40042e1da5da9eaa5d2a8

    • SHA256

      1247d21002b20a15def542f68b04915e14daf29c8eb6a8814539501fe36324f7

    • SHA512

      c2a4afaaff566c7ddd95d02e5bb722fd8b25f19c41dfa5780894d79de54983bc21d1718ecff791acce601824136db14fafcf16e9554d3d6523ac595f364da827

    • SSDEEP

      12288:6iWi2RszBxSICcO5w6SudYEW/N4HTJ4NYu3cX:4inOcO5wJVETHTJwYusX

    Score
    10/10
    emotetepoch4bankertrojanpersistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks