General

  • Target

    Docs_fc8ba86225cd3f55985deceafb59bd9f.17

  • Size

    281KB

  • Sample

    191011-9dm2lx98xs

  • MD5

    fc8ba86225cd3f55985deceafb59bd9f

  • SHA1

    6c630b1aaf0476fb7cefea90f91db0ea2c861aa2

  • SHA256

    bc527c8724350066d3af621214da7d3a29336c6d267e2608318b0446779292d5

  • SHA512

    4e976d7306f1d8c16ac77764058f929b47e1772eccf34c8ce52025a16df2bed8a43724c10a36c041c70745649b71fdcdce816f3e0e7c3ac5c20c57f0b153739a

Score
10/10

Malware Config

Extracted

Family

emotet

Botnet

Epoch2

C2

201.184.105.242:443

24.45.195.162:7080

24.45.195.162:8443

94.192.225.46:80

80.11.163.139:443

133.167.80.63:7080

198.199.114.69:8080

80.79.23.144:443

192.254.173.31:8080

67.225.229.55:8080

190.108.228.48:990

62.75.187.192:8080

185.94.252.13:443

94.205.247.10:80

211.63.71.72:8080

59.103.164.174:80

192.81.213.192:8080

27.4.80.183:443

190.145.67.134:8090

115.78.95.230:443

rsa_pubkey.plain

Targets

    • Target

      Docs_fc8ba86225cd3f55985deceafb59bd9f.17

    • Size

      281KB

    • MD5

      fc8ba86225cd3f55985deceafb59bd9f

    • SHA1

      6c630b1aaf0476fb7cefea90f91db0ea2c861aa2

    • SHA256

      bc527c8724350066d3af621214da7d3a29336c6d267e2608318b0446779292d5

    • SHA512

      4e976d7306f1d8c16ac77764058f929b47e1772eccf34c8ce52025a16df2bed8a43724c10a36c041c70745649b71fdcdce816f3e0e7c3ac5c20c57f0b153739a

    Score
    10/10

MITRE ATT&CK Matrix ATT&CK v6

Defense Evasion

Modify Registry

1
T1112

Discovery

Query Registry

4
T1012

System Information Discovery

3
T1082

Tasks