General

  • Target

    mU2Bdcw7Ea85o.dll

  • Size

    516KB

  • Sample

    230630-pm2mmacb7w

  • MD5

    d1cfff953f52bdaa4e7baccd695d3601

  • SHA1

    cd64a9447638328904eeb67a900d8721da817426

  • SHA256

    dffed6c5a66a9160064bb871e7eff65016f6490738daef4efeaab69aa9e5ae39

  • SHA512

    f7a71b8b2858ec79e7d9d5835e14c8c0602202800b9400ef7da13ab57afb9dd92fe56c824069af5931016a6d157a725961c856ddd804bea0a0a79e9fce7de9a3

  • SSDEEP

    6144:mW1239bnTe+0Qv7NSEBj43USaI6Y/jOpxHRikSYI+QALgIJ1divndEXkn:mW1e9PeexPBjvKSpuvYI+TLgs1dcEXk

Malware Config

Extracted

Family

emotet

Botnet

Epoch5

C2

202.28.34.99:8080

80.211.107.116:8080

175.126.176.79:8080

218.38.121.17:443

139.196.72.155:8080

103.71.99.57:8080

87.106.97.83:7080

178.62.112.199:8080

64.227.55.231:8080

46.101.98.60:8080

54.37.228.122:443

128.199.217.206:443

190.145.8.4:443

209.239.112.82:8080

85.214.67.203:8080

198.199.70.22:8080

128.199.242.164:8080

178.238.225.252:8080

103.85.95.4:8080

103.126.216.86:443

eck1.plain
ecs1.plain

Targets

    • Target

      mU2Bdcw7Ea85o.dll

    • Size

      516KB

    • MD5

      d1cfff953f52bdaa4e7baccd695d3601

    • SHA1

      cd64a9447638328904eeb67a900d8721da817426

    • SHA256

      dffed6c5a66a9160064bb871e7eff65016f6490738daef4efeaab69aa9e5ae39

    • SHA512

      f7a71b8b2858ec79e7d9d5835e14c8c0602202800b9400ef7da13ab57afb9dd92fe56c824069af5931016a6d157a725961c856ddd804bea0a0a79e9fce7de9a3

    • SSDEEP

      6144:mW1239bnTe+0Qv7NSEBj43USaI6Y/jOpxHRikSYI+QALgIJ1divndEXkn:mW1e9PeexPBjvKSpuvYI+TLgs1dcEXk

    • Emotet

      Emotet is a trojan that is primarily spread through spam emails.

MITRE ATT&CK Matrix

Tasks