Overview

overview

10

Static

static

10

cbf9346f54...bN.exe

windows7-x64

3

cbf9346f54...bN.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    cbf9346f54cb63755e391f870b45d8ccd5f7a5a83d4b77b1691e026148b019ebN.exe

  • Size

    32KB

  • Sample

    241216-a1khyavmhv

  • MD5

    14e093a5a1ae2ca28ef132b4ae028b80

  • SHA1

    d10a3610c22ceae793e3628073ceb8155885b775

  • SHA256

    cbf9346f54cb63755e391f870b45d8ccd5f7a5a83d4b77b1691e026148b019eb

  • SHA512

    6003fc2ec8292e6baae1e67cf69af790c54f436f2e7466c76c6fdba78d7880fc9da65889feb126db1ede268027742e72a6dd255f62c169b944026704d0b3fdc3

  • SSDEEP

    768:HCrKAbx+ZXnuEBA+Z+SrkwzaTCtzyawmE7SEsQl:HCrjb6n3a+/kv8yfmLq

Score
10/10
emotetepoch3bankerdiscoverytrojan

Malware Config

Extracted

Family

emotet

Botnet

Epoch3

C2

66.61.94.36:80

159.203.232.29:8080

185.86.148.68:443

74.208.173.91:8080

37.70.131.107:80

212.156.133.218:80

81.17.93.134:80

203.153.216.182:7080

115.79.195.246:80

115.165.3.213:80

216.75.37.196:8080

81.214.253.80:443

192.241.220.183:8080

172.96.190.154:8080

195.201.56.70:8080

105.213.67.88:80

50.116.78.109:8080

188.166.25.84:8080

187.64.128.197:80

198.57.203.63:8080
rsa_pubkey.plain

Targets

    • Target

      cbf9346f54cb63755e391f870b45d8ccd5f7a5a83d4b77b1691e026148b019ebN.exe

    • Size

      32KB

    • MD5

      14e093a5a1ae2ca28ef132b4ae028b80

    • SHA1

      d10a3610c22ceae793e3628073ceb8155885b775

    • SHA256

      cbf9346f54cb63755e391f870b45d8ccd5f7a5a83d4b77b1691e026148b019eb

    • SHA512

      6003fc2ec8292e6baae1e67cf69af790c54f436f2e7466c76c6fdba78d7880fc9da65889feb126db1ede268027742e72a6dd255f62c169b944026704d0b3fdc3

    • SSDEEP

      768:HCrKAbx+ZXnuEBA+Z+SrkwzaTCtzyawmE7SEsQl:HCrjb6n3a+/kv8yfmLq

    Score
    3/10
    discovery
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks