Overview

overview

10

Static

static

3

4a5ea4dfe9...d9.dll

windows7-x64

10

4a5ea4dfe9...d9.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    4a5ea4dfe919bf188dd5bc0703aee655fd3f98fbbd9ee92e3123c73ddf068fd9

  • Size

    846KB

  • Sample

    241120-2sca5svdjd

  • MD5

    fc3049cc5213dad249343d415d497a49

  • SHA1

    63c9377f53696de7918aff65cc0d5620975ad463

  • SHA256

    4a5ea4dfe919bf188dd5bc0703aee655fd3f98fbbd9ee92e3123c73ddf068fd9

  • SHA512

    ddfec9f97d50197fb794e5192dcc5742acd15540e1dfc87c8f93d0aca6f4dc128cb3d3a725abd1f030ea8fade9fbab117d60d735a42dd0243df3e1084927be1d

  • SSDEEP

    24576:sPMTg9U3G0ISDKvSeqfZaePWAy7rmpE3:BTg9UXRD2SeqfZZiXm

Score
10/10
emotetepoch5bankertrojan

Malware Config

Extracted

Family

emotet

Botnet

Epoch5

C2

207.148.81.119:8080

159.69.237.188:443

103.8.26.17:8080

194.9.172.107:8080

188.225.32.231:4143

103.56.149.105:8080

139.196.72.155:8080

190.90.233.66:443

37.59.209.141:8080

217.182.143.207:443

78.46.73.125:443

78.47.204.80:443

116.124.128.206:8080

45.71.195.104:8080

87.106.97.83:7080

178.62.112.199:8080

175.126.176.79:8080

134.122.119.23:8080

51.68.141.164:8080

203.153.216.46:443
ecs1.plain
eck1.plain

Targets

    • Target

      4a5ea4dfe919bf188dd5bc0703aee655fd3f98fbbd9ee92e3123c73ddf068fd9

    • Size

      846KB

    • MD5

      fc3049cc5213dad249343d415d497a49

    • SHA1

      63c9377f53696de7918aff65cc0d5620975ad463

    • SHA256

      4a5ea4dfe919bf188dd5bc0703aee655fd3f98fbbd9ee92e3123c73ddf068fd9

    • SHA512

      ddfec9f97d50197fb794e5192dcc5742acd15540e1dfc87c8f93d0aca6f4dc128cb3d3a725abd1f030ea8fade9fbab117d60d735a42dd0243df3e1084927be1d

    • SSDEEP

      24576:sPMTg9U3G0ISDKvSeqfZaePWAy7rmpE3:BTg9UXRD2SeqfZZiXm

    Score
    10/10
    emotetepoch5bankertrojan
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks