Overview

overview

10

Static

static

3

a1d294a93e...f1.dll

windows7-x64

10

a1d294a93e...f1.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    a1d294a93ec3c259d0998d6348163e63aa4ed5e0b7bba120c51b4ed7284d24f1

  • Size

    413KB

  • Sample

    241121-dyw1qsxgpg

  • MD5

    2672d8024459dae2a6c987dd68b7a238

  • SHA1

    9df25190223ec5c6b11fc2523390887bca43d221

  • SHA256

    a1d294a93ec3c259d0998d6348163e63aa4ed5e0b7bba120c51b4ed7284d24f1

  • SHA512

    6be31460edc22d847e008c737d0d98befc7d7a513ca94c6e018dc163a7144a0655ca78ffcf801c82aa54f67babfd2de3ee590bda85468695f4f454deb51fb5be

  • SSDEEP

    6144:b8OPcQEP/iCaOkKOrjLC43u48PrkFsjRUnyi+u54vIknUGhwG/K6786TEnCAIpiG:b8ScQEPKCr/O2W4Ssj/u54wMbGg

Score
10/10
emotetepoch4bankerdiscoverytrojan

Malware Config

Extracted

Family

emotet

Botnet

Epoch4

C2

131.100.24.231:80

209.59.138.75:7080

103.8.26.102:8080

178.79.147.66:8080

51.38.71.0:443

79.172.212.216:8080

162.214.50.39:7080

203.114.109.124:443

45.142.114.231:8080

212.237.5.209:443

104.251.214.46:8080

212.237.56.116:7080

107.182.225.142:8080

104.168.155.129:8080

138.185.72.26:8080

45.118.135.203:7080

216.158.226.206:443

103.75.201.2:443

158.69.222.101:443

178.63.25.185:443
eck1.plain
ecs1.plain

Targets

    • Target

      a1d294a93ec3c259d0998d6348163e63aa4ed5e0b7bba120c51b4ed7284d24f1

    • Size

      413KB

    • MD5

      2672d8024459dae2a6c987dd68b7a238

    • SHA1

      9df25190223ec5c6b11fc2523390887bca43d221

    • SHA256

      a1d294a93ec3c259d0998d6348163e63aa4ed5e0b7bba120c51b4ed7284d24f1

    • SHA512

      6be31460edc22d847e008c737d0d98befc7d7a513ca94c6e018dc163a7144a0655ca78ffcf801c82aa54f67babfd2de3ee590bda85468695f4f454deb51fb5be

    • SSDEEP

      6144:b8OPcQEP/iCaOkKOrjLC43u48PrkFsjRUnyi+u54vIknUGhwG/K6786TEnCAIpiG:b8ScQEPKCr/O2W4Ssj/u54wMbGg

    Score
    10/10
    emotetepoch4bankerdiscoverytrojan
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks