Overview

overview

10

Static

static

3

199536c2f5...09.dll

windows7-x64

10

199536c2f5...09.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    199536c2f5e9c1f6dbfdabfa62f6c4bef5f2873d0eb85f9cf99d1638e806c009

  • Size

    727KB

  • Sample

    241121-ay8sraxern

  • MD5

    c6a581027f899843b98a2255be56300c

  • SHA1

    c2fab1220d48f29ad291e305de6a33c6b415ef84

  • SHA256

    199536c2f5e9c1f6dbfdabfa62f6c4bef5f2873d0eb85f9cf99d1638e806c009

  • SHA512

    74b63d6901dc8beae2efe442cbafa5498dc476f7940c6dbd9ec79cde538dd68355da27f18f10546c5262e11086e77a67169551fc18d27ffb2406b19075c1765d

  • SSDEEP

    12288:ezhsu7PWe6Fth9tmzQS+37pzGIz/mXpo1z+pSjq+DsCJqzfo:ktR6rhjmzhsT/Yg6wjtJqzf

Score
10/10
emotetepoch5bankertrojan

Malware Config

Extracted

Family

emotet

Botnet

Epoch5

C2

178.238.225.252:8080

139.196.72.155:8080

36.67.23.59:443

103.56.149.105:8080

37.44.244.177:8080

85.25.120.45:8080

202.134.4.210:7080

78.47.204.80:443

83.229.80.93:8080

93.104.209.107:8080

80.211.107.116:8080

165.22.254.236:8080

104.244.79.94:443

185.148.169.10:8080

190.145.8.4:443

175.126.176.79:8080

139.59.80.108:8080

188.165.79.151:443

128.199.217.206:443

64.227.55.231:8080
ecs1.plain
eck1.plain

Targets

    • Target

      199536c2f5e9c1f6dbfdabfa62f6c4bef5f2873d0eb85f9cf99d1638e806c009

    • Size

      727KB

    • MD5

      c6a581027f899843b98a2255be56300c

    • SHA1

      c2fab1220d48f29ad291e305de6a33c6b415ef84

    • SHA256

      199536c2f5e9c1f6dbfdabfa62f6c4bef5f2873d0eb85f9cf99d1638e806c009

    • SHA512

      74b63d6901dc8beae2efe442cbafa5498dc476f7940c6dbd9ec79cde538dd68355da27f18f10546c5262e11086e77a67169551fc18d27ffb2406b19075c1765d

    • SSDEEP

      12288:ezhsu7PWe6Fth9tmzQS+37pzGIz/mXpo1z+pSjq+DsCJqzfo:ktR6rhjmzhsT/Yg6wjtJqzf

    Score
    10/10
    emotetepoch5bankertrojan
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks