Overview

overview

10

Static

static

3

5e5ebaaff6...33.dll

windows7-x64

10

5e5ebaaff6...33.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    5e5ebaaff6f02be553f01b743f0563d74b54d72e7c5d9ae2045805d60f881d33

  • Size

    626KB

  • Sample

    241120-xcf7ya1mfx

  • MD5

    041e5821cba57235174765afe9c7dd9e

  • SHA1

    6d9207b769fdf2ee88298853f52b14c82a4333b9

  • SHA256

    5e5ebaaff6f02be553f01b743f0563d74b54d72e7c5d9ae2045805d60f881d33

  • SHA512

    4daab2858656739f38402b88d3eb953265e3badf81929b94dda9587bc7e0421dda5fb229925fe5ba52453c122d34d9835d9cd87506fa96ce5756297f10b8a717

  • SSDEEP

    12288:C1FIcocJwMTHzXO7N2MBHiyzskF1CubVnmn:tco9MTHzXO7NZ/115mn

Score
10/10
emotetepoch4bankertrojan

Malware Config

Extracted

Family

emotet

Botnet

Epoch4

C2

138.201.142.73:8080

138.197.147.101:443

134.195.212.50:7080

104.168.154.79:8080

149.56.131.28:8080

129.232.188.93:443

212.24.98.99:8080

119.193.124.41:7080

45.118.115.99:8080

188.44.20.25:443

103.132.242.26:8080

201.94.166.162:443

1.234.21.73:7080

206.189.28.199:8080

185.8.212.130:7080

82.165.152.127:8080

176.104.106.96:8080

173.212.193.249:8080

167.99.115.35:8080

209.126.98.206:8080
eck1.plain
ecs1.plain

Targets

    • Target

      5e5ebaaff6f02be553f01b743f0563d74b54d72e7c5d9ae2045805d60f881d33

    • Size

      626KB

    • MD5

      041e5821cba57235174765afe9c7dd9e

    • SHA1

      6d9207b769fdf2ee88298853f52b14c82a4333b9

    • SHA256

      5e5ebaaff6f02be553f01b743f0563d74b54d72e7c5d9ae2045805d60f881d33

    • SHA512

      4daab2858656739f38402b88d3eb953265e3badf81929b94dda9587bc7e0421dda5fb229925fe5ba52453c122d34d9835d9cd87506fa96ce5756297f10b8a717

    • SSDEEP

      12288:C1FIcocJwMTHzXO7N2MBHiyzskF1CubVnmn:tco9MTHzXO7NZ/115mn

    Score
    10/10
    emotetepoch4bankertrojan
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks