Overview

overview

10

Static

static

3

c48fba0c51...6b.dll

windows7-x64

10

c48fba0c51...6b.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    c48fba0c51a1702d102fb70a42dcbb969d0067f337ac1d31c6c4a8b85c6b0e6b

  • Size

    932KB

  • Sample

    241120-11zwqsvfjq

  • MD5

    6509ab432bae70ecc332ddf69310aebf

  • SHA1

    8f44a9273ffaed6bfc4edbc906fd77c5322a87e7

  • SHA256

    c48fba0c51a1702d102fb70a42dcbb969d0067f337ac1d31c6c4a8b85c6b0e6b

  • SHA512

    ee38bd690613d69a6a0bcd64e91fbb05fee0d95e49b6dc6628f37e64a28290046efb93a9989536408707c8fc319781874844d60e87bcde9ee6b730b04977da6b

  • SSDEEP

    12288:ryS+zt4q0JSXaJBosLwlmZz7kg763Eenv6n21wqXUZ7aiGJ3jMM:o4qUAaJxLZzIg7600i21wqXZia3j

Score
10/10
emotetepoch4bankerdiscoverytrojan

Malware Config

Extracted

Family

emotet

Botnet

Epoch4

C2

169.197.131.16:8080

195.154.253.60:8080

152.89.239.34:443

216.158.226.206:443

159.65.88.10:8080

209.126.98.206:8080

158.69.222.101:443

173.212.193.249:8080

185.157.82.211:8080

81.0.236.90:443

103.75.201.2:443

46.55.222.11:443

159.8.59.82:8080

207.38.84.195:8080

50.116.54.215:443

79.172.212.216:8080

212.237.17.99:8080

212.24.98.99:8080

178.79.147.66:8080

51.254.140.238:7080
eck1.plain
ecs1.plain

Targets

    • Target

      c48fba0c51a1702d102fb70a42dcbb969d0067f337ac1d31c6c4a8b85c6b0e6b

    • Size

      932KB

    • MD5

      6509ab432bae70ecc332ddf69310aebf

    • SHA1

      8f44a9273ffaed6bfc4edbc906fd77c5322a87e7

    • SHA256

      c48fba0c51a1702d102fb70a42dcbb969d0067f337ac1d31c6c4a8b85c6b0e6b

    • SHA512

      ee38bd690613d69a6a0bcd64e91fbb05fee0d95e49b6dc6628f37e64a28290046efb93a9989536408707c8fc319781874844d60e87bcde9ee6b730b04977da6b

    • SSDEEP

      12288:ryS+zt4q0JSXaJBosLwlmZz7kg763Eenv6n21wqXUZ7aiGJ3jMM:o4qUAaJxLZzIg7600i21wqXZia3j

    Score
    10/10
    emotetepoch4bankerdiscoverytrojan
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks