Overview

overview

10

Static

static

3

0f041f1975...f1.dll

windows7-x64

1

0f041f1975...f1.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    0f041f19751ed1503de5b267c9ece35be80620c5e2218369c9fed9a327709ff1

  • Size

    526KB

  • Sample

    241120-1ymtdsvepj

  • MD5

    d76469afb07683dac28d95dd6415de58

  • SHA1

    d541626f6b8a128d088e7fbe6b4b0e2aa872c6fa

  • SHA256

    0f041f19751ed1503de5b267c9ece35be80620c5e2218369c9fed9a327709ff1

  • SHA512

    f9a6b556d96e8f0ee0497c774f13560a30c05c1b9fc2713cb2643bffb0903a93ed039fee153a54791100ccfddc4d3975906703b8e8f3ce6ed5e03dade06f8e51

  • SSDEEP

    12288:TXTKX0vZJKjuCMZaiPbko6d/SODM0zNrASKOyJ21cC:TXTlzhPbkr/SAFyT

Score
10/10
emotetepoch4bankertrojan

Malware Config

Extracted

Family

emotet

Botnet

Epoch4

C2

134.122.66.193:8080

197.242.150.244:8080

186.194.240.217:443

151.106.112.196:8080

119.193.124.41:7080

209.97.163.214:443

103.43.75.120:443

188.44.20.25:443

51.161.73.194:443

51.254.140.238:7080

172.104.251.154:8080

164.68.99.3:8080

159.89.202.34:443

209.126.98.206:8080

115.68.227.76:8080

207.148.79.14:8080

64.227.100.222:8080

46.55.222.11:443

212.24.98.99:8080

82.223.21.224:8080
eck1.plain
ecs1.plain

Targets

    • Target

      0f041f19751ed1503de5b267c9ece35be80620c5e2218369c9fed9a327709ff1

    • Size

      526KB

    • MD5

      d76469afb07683dac28d95dd6415de58

    • SHA1

      d541626f6b8a128d088e7fbe6b4b0e2aa872c6fa

    • SHA256

      0f041f19751ed1503de5b267c9ece35be80620c5e2218369c9fed9a327709ff1

    • SHA512

      f9a6b556d96e8f0ee0497c774f13560a30c05c1b9fc2713cb2643bffb0903a93ed039fee153a54791100ccfddc4d3975906703b8e8f3ce6ed5e03dade06f8e51

    • SSDEEP

      12288:TXTKX0vZJKjuCMZaiPbko6d/SODM0zNrASKOyJ21cC:TXTlzhPbkr/SAFyT

    Score
    10/10
    emotetepoch4bankertrojan
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks