General

  • Target

    Docs_8284e996aea8e5075256c03a93eaa6df.22

  • Size

    281KB

  • Sample

    191011-d4l874b3wn

  • MD5

    8284e996aea8e5075256c03a93eaa6df

  • SHA1

    296a881bdde6650d439f607293da8c63c1ad43e0

  • SHA256

    9e1d7cd63b0edcb4b3c4b1c86ecf477245ba82b4291bf26484fe2dd6cd9d12a1

  • SHA512

    55f7da163cac488fa9d096c19a7ab88005aaafd7588c700bd41f4fcb62becd8ad4ca8f967be7af495a0d8365779f4a92f6684884595e9f9e647ab56c17fa58a4

Score
10/10

Malware Config

Extracted

Family

emotet

Botnet

Epoch2

C2

186.75.241.230:80

181.143.194.138:443

181.143.53.227:21

85.104.59.244:20

80.11.163.139:443

167.71.10.37:8080

104.131.44.150:8080

185.187.198.15:80

133.167.80.63:7080

198.199.114.69:8080

144.139.247.220:80

152.89.236.214:8080

78.24.219.147:8080

92.222.216.44:8080

46.105.131.87:80

190.226.44.20:21

182.176.132.213:8090

85.54.169.141:8080

192.81.213.192:8080

101.187.237.217:20

rsa_pubkey.plain

Targets

    • Target

      Docs_8284e996aea8e5075256c03a93eaa6df.22

    • Size

      281KB

    • MD5

      8284e996aea8e5075256c03a93eaa6df

    • SHA1

      296a881bdde6650d439f607293da8c63c1ad43e0

    • SHA256

      9e1d7cd63b0edcb4b3c4b1c86ecf477245ba82b4291bf26484fe2dd6cd9d12a1

    • SHA512

      55f7da163cac488fa9d096c19a7ab88005aaafd7588c700bd41f4fcb62becd8ad4ca8f967be7af495a0d8365779f4a92f6684884595e9f9e647ab56c17fa58a4

    Score
    10/10

MITRE ATT&CK Matrix ATT&CK v6

Defense Evasion

Modify Registry

1
T1112

Discovery

Query Registry

3
T1012

System Information Discovery

3
T1082

Tasks