Overview

overview

10

Static

static

3

85d31b6c89...b6.dll

windows7-x64

10

85d31b6c89...b6.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    85d31b6c89b2337fa3801cb9af7789d3cef1e3ed00a18c4afc9ff0921c425fb6

  • Size

    304KB

  • Sample

    250223-bgvegatngn

  • MD5

    f329888c5177eaa15a96af580b00b920

  • SHA1

    41df6a0dc71b3d7cb7ca5d13f9e2df4171c1a9a7

  • SHA256

    85d31b6c89b2337fa3801cb9af7789d3cef1e3ed00a18c4afc9ff0921c425fb6

  • SHA512

    0fde34d07f79b9557ee4760a5d1d63890c573966f81a6a297820a73bf1523f46c249d9d1fe8b5734951c0f23dde56701cebb8fc13e1c0b916c99c3cac4a62d5a

  • SSDEEP

    6144:G5PVE0Ugq2LU3EQzJHAOP/lY80yBC7X7hXNegM4vvOIwpf/m:Gti0UgobLdC7XewuIy/m

Score
10/10
emotetepoch4bankerdiscoverytrojan

Malware Config

Extracted

Family

emotet

Botnet

Epoch4

C2

103.134.85.85:80

178.128.83.165:80

79.172.212.216:8080

162.214.50.39:7080

138.185.72.26:8080

212.24.98.99:8080

212.237.56.116:7080

119.235.255.201:8080

58.227.42.236:80

212.237.17.99:8080

103.75.201.2:443

131.100.24.231:80

160.16.102.168:80

153.126.203.229:8080

158.69.222.101:443

162.243.175.63:443

31.24.158.56:8080

51.254.140.238:7080

217.182.143.207:443

104.251.214.46:8080
eck1.plain
ecs1.plain

Targets

    • Target

      85d31b6c89b2337fa3801cb9af7789d3cef1e3ed00a18c4afc9ff0921c425fb6

    • Size

      304KB

    • MD5

      f329888c5177eaa15a96af580b00b920

    • SHA1

      41df6a0dc71b3d7cb7ca5d13f9e2df4171c1a9a7

    • SHA256

      85d31b6c89b2337fa3801cb9af7789d3cef1e3ed00a18c4afc9ff0921c425fb6

    • SHA512

      0fde34d07f79b9557ee4760a5d1d63890c573966f81a6a297820a73bf1523f46c249d9d1fe8b5734951c0f23dde56701cebb8fc13e1c0b916c99c3cac4a62d5a

    • SSDEEP

      6144:G5PVE0Ugq2LU3EQzJHAOP/lY80yBC7X7hXNegM4vvOIwpf/m:Gti0UgobLdC7XewuIy/m

    Score
    10/10
    emotetepoch4bankerdiscoverytrojan
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks