Overview

overview

10

Static

static

3

224fe4a379...b3.dll

windows7-x64

10

224fe4a379...b3.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    224fe4a379a431b94c500fd32c92dcfc986334f5a2b3eb8b6e1cc1861a06b9b3

  • Size

    520KB

  • Sample

    241121-affn9awdpa

  • MD5

    cef0852106c4b88ac96aaf443a986665

  • SHA1

    c86da5bfac0748411f283b24e2786eeba406ed10

  • SHA256

    224fe4a379a431b94c500fd32c92dcfc986334f5a2b3eb8b6e1cc1861a06b9b3

  • SHA512

    5a382da94d9a5082fe3b9be917903b616790ae9ebf82c10f498b1429dd0441408f3bc80e3c4bc55a5c5106ae38e932207e86c5b4c6613465f71b4015e8c30c60

  • SSDEEP

    12288:KZ01lbelr11DkMO0rfFb/pn5iLEEgTyfEP49f:89lr1Vk70h/KLhn

Score
10/10
emotetepoch5bankerdiscoverytrojan

Malware Config

Extracted

Family

emotet

Botnet

Epoch5

C2

159.69.43.124:8080

45.79.80.198:443

207.148.81.119:8080

128.199.192.135:8080

118.98.72.86:443

217.182.143.207:443

168.197.250.14:80

116.124.128.206:8080

78.46.73.125:443

185.148.168.15:8080

195.154.146.35:443

85.214.67.203:8080

194.9.172.107:8080

59.148.253.194:443

210.57.209.142:8080

54.38.242.185:443

195.77.239.39:8080

159.69.237.188:443

104.131.62.48:8080

62.171.178.147:8080
eck1.plain
ecs1.plain

Targets

    • Target

      224fe4a379a431b94c500fd32c92dcfc986334f5a2b3eb8b6e1cc1861a06b9b3

    • Size

      520KB

    • MD5

      cef0852106c4b88ac96aaf443a986665

    • SHA1

      c86da5bfac0748411f283b24e2786eeba406ed10

    • SHA256

      224fe4a379a431b94c500fd32c92dcfc986334f5a2b3eb8b6e1cc1861a06b9b3

    • SHA512

      5a382da94d9a5082fe3b9be917903b616790ae9ebf82c10f498b1429dd0441408f3bc80e3c4bc55a5c5106ae38e932207e86c5b4c6613465f71b4015e8c30c60

    • SSDEEP

      12288:KZ01lbelr11DkMO0rfFb/pn5iLEEgTyfEP49f:89lr1Vk70h/KLhn

    Score
    10/10
    emotetepoch5bankerdiscoverytrojan
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks