Overview

overview

10

Static

static

3

fd07fca4eb...34.dll

windows7-x64

10

fd07fca4eb...34.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    60f04808e5ce7763f8bd6461a19bd162a1c918770553f8e15b6a4114ff0f0686

  • Size

    379KB

  • Sample

    241120-znmj7stepq

  • MD5

    49a91e2c599f07d2304ad6d649802a29

  • SHA1

    58991ef72841537bc3c80e4f26c59e4664bec7e5

  • SHA256

    60f04808e5ce7763f8bd6461a19bd162a1c918770553f8e15b6a4114ff0f0686

  • SHA512

    71995fa379a034b0e6d83136a66bc0ba736af870ef9eccbc83363f3d8423c974178d358c616b1fd6daee41f2b46501307dd8ce7c83d19ea6a04350b694946419

  • SSDEEP

    6144:buaZ57m6orlb49ET6VBVbD5IFt0g+Q1z0PKKf1iO3D7A95JF+wKAVF6wCHBnpTh8:a6a6YlE9Emdsv1IyKf1iO3D7AfejAPOa

Score
10/10
emotetepoch5bankerdiscoverytrojan

Malware Config

Extracted

Family

emotet

Botnet

Epoch5

C2

45.138.98.34:80

69.16.218.101:8080

51.210.242.234:8080

185.148.168.220:8080

142.4.219.173:8080

54.38.242.185:443

191.252.103.16:80

104.131.62.48:8080

62.171.178.147:8080

217.182.143.207:443

168.197.250.14:80

37.44.244.177:8080

66.42.57.149:443

210.57.209.142:8080

159.69.237.188:443

116.124.128.206:8080

128.199.192.135:8080

195.154.146.35:443

185.148.168.15:8080

195.77.239.39:8080
eck1.plain
ecs1.plain

Targets

    • Target

      fd07fca4eb2f7250cfdbb52f226163d1682af37bd98769a9a1307854a580fe34

    • Size

      620KB

    • MD5

      310530ba814de423c10426965e53c288

    • SHA1

      853e262f83acc1e0ca20273213acdb6428a41417

    • SHA256

      fd07fca4eb2f7250cfdbb52f226163d1682af37bd98769a9a1307854a580fe34

    • SHA512

      3f8171b7656e409b0b1be43bceaf3527baeb27625279c7e0951813b1c715e8962f124ba9feef37309cebf7041838df8cbeb215b436d53efa442abe20281ebff3

    • SSDEEP

      12288:vClISqMT89ornPmGZtn5yzrDQ1ywIdO3D7AfojAxOBnVV0KOFD3EPO7:vmTWornPDryzrUywIdOz7AfOAxsVZOFZ

    Score
    10/10
    emotetepoch5bankerdiscoverytrojan
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks