Overview

overview

10

Static

static

3

fdfcc1cddc...12.dll

windows7-x64

10

fdfcc1cddc...12.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    fdfcc1cddc50381d51856468e7f712f8b75605e9d7fafce7964012bb01630412

  • Size

    828KB

  • Sample

    241120-1tr8batfjd

  • MD5

    1d1c871f554d6af03a5934c85ea91564

  • SHA1

    0d9de121db8be0f5085a453eedff8e090d590412

  • SHA256

    fdfcc1cddc50381d51856468e7f712f8b75605e9d7fafce7964012bb01630412

  • SHA512

    850d625f5636b43e4445e7429b13aba3b2ff8e3b2c84b544ceb26608506909289ed1a021e61407b3fc6927db3091e949949367050e96c4fbc75651277da30ce2

  • SSDEEP

    12288:Q2lATeWbIqbY5YNsCvpZ7yLbUU3EgBem/UewRaDhCRzYKM8/aqov:Owjk74p3EgBeRewRLcKH9

Score
10/10
emotetepoch5bankerdiscoverytrojan

Malware Config

Extracted

Family

emotet

Botnet

Epoch5

C2

186.250.48.5:80

168.119.39.118:443

185.168.130.138:443

190.90.233.66:443

159.69.237.188:443

54.37.228.122:443

93.104.209.107:8080

185.148.168.15:8080

198.199.98.78:8080

87.106.97.83:7080

195.77.239.39:8080

37.44.244.177:8080

54.38.242.185:443

185.184.25.78:8080

116.124.128.206:8080

139.196.72.155:8080

128.199.192.135:8080

103.41.204.169:8080

78.47.204.80:443

68.183.93.250:443
eck1.plain
ecs1.plain

Targets

    • Target

      fdfcc1cddc50381d51856468e7f712f8b75605e9d7fafce7964012bb01630412

    • Size

      828KB

    • MD5

      1d1c871f554d6af03a5934c85ea91564

    • SHA1

      0d9de121db8be0f5085a453eedff8e090d590412

    • SHA256

      fdfcc1cddc50381d51856468e7f712f8b75605e9d7fafce7964012bb01630412

    • SHA512

      850d625f5636b43e4445e7429b13aba3b2ff8e3b2c84b544ceb26608506909289ed1a021e61407b3fc6927db3091e949949367050e96c4fbc75651277da30ce2

    • SSDEEP

      12288:Q2lATeWbIqbY5YNsCvpZ7yLbUU3EgBem/UewRaDhCRzYKM8/aqov:Owjk74p3EgBeRewRLcKH9

    Score
    10/10
    emotetepoch5bankerdiscoverytrojan
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks