Overview

overview

10

Static

static

3

0016c647d8...a7.dll

windows7-x64

10

0016c647d8...a7.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    0016c647d86a20ea9ebc77127771ce893aeb87a622458ba011efeafe4950dba7

  • Size

    612KB

  • Sample

    241121-alkkds1man

  • MD5

    2921ff0cec95135ca05d8401e74b9cc9

  • SHA1

    5e659297325de534fce2a181276c2a008bca280b

  • SHA256

    0016c647d86a20ea9ebc77127771ce893aeb87a622458ba011efeafe4950dba7

  • SHA512

    366cedbec9c48b494b502ed0872768d37e565ec47e3eea20527140e620aa45a08376f001a5626bb08a54f7c18246d0fd64b513276c291e35172ecee352c29647

  • SSDEEP

    12288:kqdJaxkOWFornPmGZqnTFWbD+UYVubhesslBvQqEPO7:kOOsornPTwFWbXYVohevBoi7

Score
10/10
emotetepoch4bankerdiscoverytrojan

Malware Config

Extracted

Family

emotet

Botnet

Epoch4

C2

131.100.24.231:80

209.59.138.75:7080

103.8.26.103:8080

51.38.71.0:443

212.237.17.99:8080

79.172.212.216:8080

207.38.84.195:8080

104.168.155.129:8080

178.79.147.66:8080

46.55.222.11:443

103.8.26.102:8080

192.254.71.210:443

45.176.232.124:443

203.114.109.124:443

51.68.175.8:8080

58.227.42.236:80

45.142.114.231:8080

217.182.143.207:443

178.63.25.185:443

45.118.115.99:8080
eck1.plain
ecs1.plain

Targets

    • Target

      0016c647d86a20ea9ebc77127771ce893aeb87a622458ba011efeafe4950dba7

    • Size

      612KB

    • MD5

      2921ff0cec95135ca05d8401e74b9cc9

    • SHA1

      5e659297325de534fce2a181276c2a008bca280b

    • SHA256

      0016c647d86a20ea9ebc77127771ce893aeb87a622458ba011efeafe4950dba7

    • SHA512

      366cedbec9c48b494b502ed0872768d37e565ec47e3eea20527140e620aa45a08376f001a5626bb08a54f7c18246d0fd64b513276c291e35172ecee352c29647

    • SSDEEP

      12288:kqdJaxkOWFornPmGZqnTFWbD+UYVubhesslBvQqEPO7:kOOsornPTwFWbXYVohevBoi7

    Score
    10/10
    emotetepoch4bankerdiscoverytrojan
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks