Overview

overview

10

Static

static

3

dffed6c5a6...39.dll

windows7-x64

10

dffed6c5a6...39.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    53344b3672adf2e32b550466477d6171273daa47a8533a0fc2c0116931e65618

  • Size

    283KB

  • Sample

    241118-zeyacavgkp

  • MD5

    d8a02253f7d8fd6173b7c2da08d8472d

  • SHA1

    1eb4a482cafe03f0982512edd5453e54a18cfe9a

  • SHA256

    53344b3672adf2e32b550466477d6171273daa47a8533a0fc2c0116931e65618

  • SHA512

    fa56cf566e54bfd6b78e34632d8f7c0acf03523a25dc856d19487be0992904da429ca490675d79eea817ec788e1d1d73f8079b01db65832d5adfcb49b488ceba

  • SSDEEP

    6144:zREMvdSNzbNGsYCXXcJC7qAF0V7gjMaAelGhq2UwpaHnS3j4:ttvydGsYicJQgsjMaAekhpus4

Score
10/10
emotetepoch5bankertrojan

Malware Config

Extracted

Family

emotet

Botnet

Epoch5

C2

202.28.34.99:8080

80.211.107.116:8080

175.126.176.79:8080

218.38.121.17:443

139.196.72.155:8080

103.71.99.57:8080

87.106.97.83:7080

178.62.112.199:8080

64.227.55.231:8080

46.101.98.60:8080

54.37.228.122:443

128.199.217.206:443

190.145.8.4:443

209.239.112.82:8080

85.214.67.203:8080

198.199.70.22:8080

128.199.242.164:8080

178.238.225.252:8080

103.85.95.4:8080

103.126.216.86:443
eck1.plain
ecs1.plain

Targets

    • Target

      dffed6c5a66a9160064bb871e7eff65016f6490738daef4efeaab69aa9e5ae39.exe

    • Size

      516KB

    • MD5

      d1cfff953f52bdaa4e7baccd695d3601

    • SHA1

      cd64a9447638328904eeb67a900d8721da817426

    • SHA256

      dffed6c5a66a9160064bb871e7eff65016f6490738daef4efeaab69aa9e5ae39

    • SHA512

      f7a71b8b2858ec79e7d9d5835e14c8c0602202800b9400ef7da13ab57afb9dd92fe56c824069af5931016a6d157a725961c856ddd804bea0a0a79e9fce7de9a3

    • SSDEEP

      6144:mW1239bnTe+0Qv7NSEBj43USaI6Y/jOpxHRikSYI+QALgIJ1divndEXkn:mW1e9PeexPBjvKSpuvYI+TLgs1dcEXk

    Score
    10/10
    emotetepoch5bankertrojan
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks