Overview

overview

10

Static

static

3

dffed6c5a6...39.dll

windows7-x64

10

dffed6c5a6...39.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    7127e3cd194bbbec6f4fbaff6adf13b24f92b9fb95e5ae0e4a9694731edd1054

  • Size

    283KB

  • Sample

    241117-bkj3xaxhml

  • MD5

    a6d357b387a37496169f30822f069dfb

  • SHA1

    853cb9abf432c00b70a8088f145a4471b1ea5387

  • SHA256

    7127e3cd194bbbec6f4fbaff6adf13b24f92b9fb95e5ae0e4a9694731edd1054

  • SHA512

    839c3bc084b1c08ac002e85aafec3c0dea1145a338c13299d2579d3f65de1c36e5a1f75f37884e7b5b72c438c4091c63929673578ba4a1fd5fadde0a2c3e0b51

  • SSDEEP

    6144:u5s21e73/RUO3Q8UsWsZ5FR+3yxiYbnvNKgXIhOZ1A0JyklNCj/mBXY:uT1U3/RUOF7WisCx14g441A0Jy27pY

Score
10/10
emotetepoch5bankertrojan

Malware Config

Extracted

Family

emotet

Botnet

Epoch5

C2

202.28.34.99:8080

80.211.107.116:8080

175.126.176.79:8080

218.38.121.17:443

139.196.72.155:8080

103.71.99.57:8080

87.106.97.83:7080

178.62.112.199:8080

64.227.55.231:8080

46.101.98.60:8080

54.37.228.122:443

128.199.217.206:443

190.145.8.4:443

209.239.112.82:8080

85.214.67.203:8080

198.199.70.22:8080

128.199.242.164:8080

178.238.225.252:8080

103.85.95.4:8080

103.126.216.86:443
eck1.plain
ecs1.plain

Targets

    • Target

      dffed6c5a66a9160064bb871e7eff65016f6490738daef4efeaab69aa9e5ae39.exe

    • Size

      516KB

    • MD5

      d1cfff953f52bdaa4e7baccd695d3601

    • SHA1

      cd64a9447638328904eeb67a900d8721da817426

    • SHA256

      dffed6c5a66a9160064bb871e7eff65016f6490738daef4efeaab69aa9e5ae39

    • SHA512

      f7a71b8b2858ec79e7d9d5835e14c8c0602202800b9400ef7da13ab57afb9dd92fe56c824069af5931016a6d157a725961c856ddd804bea0a0a79e9fce7de9a3

    • SSDEEP

      6144:mW1239bnTe+0Qv7NSEBj43USaI6Y/jOpxHRikSYI+QALgIJ1divndEXkn:mW1e9PeexPBjvKSpuvYI+TLgs1dcEXk

    Score
    10/10
    emotetepoch5bankertrojan
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks