Overview

overview

10

Static

static

3

390868f54a...97.dll

windows7-x64

10

390868f54a...97.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    c2838a2c42608cbe1c7dec098c69b71d54ccf44125f3643292d67f00ec9748b6

  • Size

    483KB

  • Sample

    241120-211cyawdlm

  • MD5

    c462f971990e8d87fd0a3a035a696945

  • SHA1

    00b8411bfec36bba091ae78bc483215175a31a7f

  • SHA256

    c2838a2c42608cbe1c7dec098c69b71d54ccf44125f3643292d67f00ec9748b6

  • SHA512

    94bd4ab81bdddcd0690d397c260f6cebde0ff08139902b44787544ad56a82d3357341f19145144300b09a3bc1499d913bd431f5adcdc39da35950c47d9039e1a

  • SSDEEP

    12288:cgf29cTBC3dcYxMk7GWNks0jTKADcyrQL7c:3VNYnGLs0/xDcy8o

Score
10/10
emotetepoch4bankerdiscoverytrojan

Malware Config

Extracted

Family

emotet

Botnet

Epoch4

C2

169.197.131.16:8080

195.154.253.60:8080

152.89.239.34:443

216.158.226.206:443

159.65.88.10:8080

209.126.98.206:8080

158.69.222.101:443

173.212.193.249:8080

185.157.82.211:8080

81.0.236.90:443

103.75.201.2:443

46.55.222.11:443

159.8.59.82:8080

207.38.84.195:8080

50.116.54.215:443

79.172.212.216:8080

212.237.17.99:8080

212.24.98.99:8080

178.79.147.66:8080

51.254.140.238:7080
eck1.plain
ecs1.plain

Targets

    • Target

      390868f54adfd09d97e28c7a19d520d951e67a6ec7d5c4c23b3fc80d3c89a097

    • Size

      1024KB

    • MD5

      6918e7773d7939ba624faa6d3efe8da8

    • SHA1

      d1a9ad8b857ff868ba19641ccf431fb64d4753fe

    • SHA256

      390868f54adfd09d97e28c7a19d520d951e67a6ec7d5c4c23b3fc80d3c89a097

    • SHA512

      33d50c22f3ccbe0db17b77ccd00522ac022631558adf09a2480e20b9d707b725e4a0b43f12708e47ba9c05f3f5fd5f005983a00c51a5c73281e3841a04636bc7

    • SSDEEP

      12288:lVHxC/pAfc4onhlKVXlcNCkzNk7/h9q4rpDfADWyKvQ:TRnGnhlKVXlpkq7/5cDWyB

    Score
    10/10
    emotetepoch4bankerdiscoverytrojan

    • Emotet

      Emotet is a trojan that is primarily spread through spam emails.

      trojanbankeremotet

    • Emotet family

      emotet

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks