General

  • Target

    Docs_c41d7850c8e4bf6f19eb9cb63555968c.51

  • Size

    286KB

  • Sample

    191011-byzg16f37n

  • MD5

    c41d7850c8e4bf6f19eb9cb63555968c

  • SHA1

    cba6c5265d92ac95f92d8095458d80631a8d5f05

  • SHA256

    30deb0373c7608c07e9ff7333935ba9315280d321f2d4caa9b056b529230d6b6

  • SHA512

    d0e16eff85a763abf0b2af43f1a344f4a2dcab9cb97e11518b85ac90d97a6636e26a01580cefb0c49455c5202abf971d9b658540dfcaf186d2ba3297690c21a2

Score
10/10

Malware Config

Extracted

Family

emotet

Botnet

Epoch2

C2

186.75.241.230:80

181.143.194.138:443

181.143.53.227:21

85.104.59.244:20

80.11.163.139:443

167.71.10.37:8080

104.131.44.150:8080

185.187.198.15:80

133.167.80.63:7080

198.199.114.69:8080

144.139.247.220:80

152.89.236.214:8080

78.24.219.147:8080

92.222.216.44:8080

46.105.131.87:80

190.226.44.20:21

182.176.132.213:8090

85.54.169.141:8080

192.81.213.192:8080

101.187.237.217:20

rsa_pubkey.plain

Targets

    • Target

      Docs_c41d7850c8e4bf6f19eb9cb63555968c.51

    • Size

      286KB

    • MD5

      c41d7850c8e4bf6f19eb9cb63555968c

    • SHA1

      cba6c5265d92ac95f92d8095458d80631a8d5f05

    • SHA256

      30deb0373c7608c07e9ff7333935ba9315280d321f2d4caa9b056b529230d6b6

    • SHA512

      d0e16eff85a763abf0b2af43f1a344f4a2dcab9cb97e11518b85ac90d97a6636e26a01580cefb0c49455c5202abf971d9b658540dfcaf186d2ba3297690c21a2

    Score
    10/10

MITRE ATT&CK Matrix ATT&CK v6

Discovery

Query Registry

3
T1012

System Information Discovery

3
T1082

Tasks