Overview

overview

10

Static

static

3

bd66c9b133...04.dll

windows7-x64

10

bd66c9b133...04.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    bd66c9b13336507efb003c6ef3d1e002b3e5d9a57f9879ed01e99c01bd835404

  • Size

    524KB

  • Sample

    241120-1lcsnaymck

  • MD5

    e1a126fc5902f8f275495484875a6227

  • SHA1

    004b141fe27e8db9f61248b454a7ad287d7bede0

  • SHA256

    bd66c9b13336507efb003c6ef3d1e002b3e5d9a57f9879ed01e99c01bd835404

  • SHA512

    3a9aa01a29bf92d90140c9b0385531c216dcd666d530ec56d8b2597e9fd6c13928368195edf0c9b6edec87de98913e8629550912222265bce10b0faf8a72ac24

  • SSDEEP

    12288:F4UuFuNB2bvR0Iva6qREvKMHBK8i/Da7VpxmIXf5:FriuNsVC6qsi/g5

Score
10/10
emotetepoch4bankerdiscoverytrojan

Malware Config

Extracted

Family

emotet

Botnet

Epoch4

C2

54.37.212.235:80

45.15.23.184:443

41.76.108.46:8080

212.237.5.209:443

46.55.222.11:443

207.38.84.195:8080

103.8.26.102:8080

138.185.72.26:8080

104.251.214.46:8080

110.232.117.186:8080

51.68.175.8:8080

176.104.106.96:8080

216.158.226.206:443

103.8.26.103:8080

103.75.201.2:443

210.57.217.132:8080

195.154.133.20:443

45.142.114.231:8080

107.182.225.142:8080

158.69.222.101:443
eck1.plain
ecs1.plain

Targets

    • Target

      bd66c9b13336507efb003c6ef3d1e002b3e5d9a57f9879ed01e99c01bd835404

    • Size

      524KB

    • MD5

      e1a126fc5902f8f275495484875a6227

    • SHA1

      004b141fe27e8db9f61248b454a7ad287d7bede0

    • SHA256

      bd66c9b13336507efb003c6ef3d1e002b3e5d9a57f9879ed01e99c01bd835404

    • SHA512

      3a9aa01a29bf92d90140c9b0385531c216dcd666d530ec56d8b2597e9fd6c13928368195edf0c9b6edec87de98913e8629550912222265bce10b0faf8a72ac24

    • SSDEEP

      12288:F4UuFuNB2bvR0Iva6qREvKMHBK8i/Da7VpxmIXf5:FriuNsVC6qsi/g5

    Score
    10/10
    emotetepoch4bankerdiscoverytrojan
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks