Overview

overview

10

Static

static

3

dffed6c5a6...39.dll

windows7-x64

10

dffed6c5a6...39.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    8840fa92d98a0d5daf7ebe3e0bde80d84b4f0b1e0352b8657dec1492c7a88e77

  • Size

    283KB

  • Sample

    241113-n9yntasank

  • MD5

    e1437dd904c37bbcd60cb98f02cf5db4

  • SHA1

    bfb5dead179bdb1dc5911fdf7cb2acd7c3342a46

  • SHA256

    8840fa92d98a0d5daf7ebe3e0bde80d84b4f0b1e0352b8657dec1492c7a88e77

  • SHA512

    f85073a9a2c5f93439fde9981ec19889972d79411e7646d7b04ef85509c9db8eba74f856b99deb9c2aaad0c2e41724d8c8a049e6753a060c6ef725f50bc8284d

  • SSDEEP

    6144:P2qSiHKkHI36DcTEnTz95m3IUY675Qxeg/pTsTotigZmsm7k:5Si9H0ScYnnmYn4jMJsToZcsD

Score
10/10
emotetepoch5bankertrojan

Malware Config

Extracted

Family

emotet

Botnet

Epoch5

C2

202.28.34.99:8080

80.211.107.116:8080

175.126.176.79:8080

218.38.121.17:443

139.196.72.155:8080

103.71.99.57:8080

87.106.97.83:7080

178.62.112.199:8080

64.227.55.231:8080

46.101.98.60:8080

54.37.228.122:443

128.199.217.206:443

190.145.8.4:443

209.239.112.82:8080

85.214.67.203:8080

198.199.70.22:8080

128.199.242.164:8080

178.238.225.252:8080

103.85.95.4:8080

103.126.216.86:443
eck1.plain
ecs1.plain

Targets

    • Target

      dffed6c5a66a9160064bb871e7eff65016f6490738daef4efeaab69aa9e5ae39.exe

    • Size

      516KB

    • MD5

      d1cfff953f52bdaa4e7baccd695d3601

    • SHA1

      cd64a9447638328904eeb67a900d8721da817426

    • SHA256

      dffed6c5a66a9160064bb871e7eff65016f6490738daef4efeaab69aa9e5ae39

    • SHA512

      f7a71b8b2858ec79e7d9d5835e14c8c0602202800b9400ef7da13ab57afb9dd92fe56c824069af5931016a6d157a725961c856ddd804bea0a0a79e9fce7de9a3

    • SSDEEP

      6144:mW1239bnTe+0Qv7NSEBj43USaI6Y/jOpxHRikSYI+QALgIJ1divndEXkn:mW1e9PeexPBjvKSpuvYI+TLgs1dcEXk

    Score
    10/10
    emotetepoch5bankertrojan
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks