Overview

overview

10

Static

static

3

dffed6c5a6...39.dll

windows7-x64

10

dffed6c5a6...39.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    52bde65cf46c4a03f9dc018e1722ed602bdac09efc07d2e8bb1d762ce23b077c

  • Size

    283KB

  • Sample

    241118-xwqkqasrcv

  • MD5

    96485f94ac97cf8fb59f8358a29a528a

  • SHA1

    b8c54c545c663501c2a1d31dc0c7017d9d16f0db

  • SHA256

    52bde65cf46c4a03f9dc018e1722ed602bdac09efc07d2e8bb1d762ce23b077c

  • SHA512

    38a31cfb5d5b906724629753a68fe2c41ce9d815340a69005b9e7ddf161448f705b97c3f30f165def8ecb775541936196d9dcd62fbd60c3e69ef05f08369fc6a

  • SSDEEP

    6144:dhBYZAfbMmL+KrzbE0dw/tGz1ju2YZkUOyBF+ri3xP0qHu3S:b84iKr/ESwFu1ar2yBEW3DH+S

Score
10/10
emotetepoch5bankertrojan

Malware Config

Extracted

Family

emotet

Botnet

Epoch5

C2

202.28.34.99:8080

80.211.107.116:8080

175.126.176.79:8080

218.38.121.17:443

139.196.72.155:8080

103.71.99.57:8080

87.106.97.83:7080

178.62.112.199:8080

64.227.55.231:8080

46.101.98.60:8080

54.37.228.122:443

128.199.217.206:443

190.145.8.4:443

209.239.112.82:8080

85.214.67.203:8080

198.199.70.22:8080

128.199.242.164:8080

178.238.225.252:8080

103.85.95.4:8080

103.126.216.86:443
eck1.plain
ecs1.plain

Targets

    • Target

      dffed6c5a66a9160064bb871e7eff65016f6490738daef4efeaab69aa9e5ae39.exe

    • Size

      516KB

    • MD5

      d1cfff953f52bdaa4e7baccd695d3601

    • SHA1

      cd64a9447638328904eeb67a900d8721da817426

    • SHA256

      dffed6c5a66a9160064bb871e7eff65016f6490738daef4efeaab69aa9e5ae39

    • SHA512

      f7a71b8b2858ec79e7d9d5835e14c8c0602202800b9400ef7da13ab57afb9dd92fe56c824069af5931016a6d157a725961c856ddd804bea0a0a79e9fce7de9a3

    • SSDEEP

      6144:mW1239bnTe+0Qv7NSEBj43USaI6Y/jOpxHRikSYI+QALgIJ1divndEXkn:mW1e9PeexPBjvKSpuvYI+TLgs1dcEXk

    Score
    10/10
    emotetepoch5bankertrojan
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks