General

  • Target

    Docs_381e7ef1e1748eb56b9a7316ec0eebca.14

  • Size

    262KB

  • Sample

    191015-qy8rvepna2

  • MD5

    381e7ef1e1748eb56b9a7316ec0eebca

  • SHA1

    49d8febba985b19e0f487d2cd4096b20e9fccad5

  • SHA256

    d71b3132e0f94efd3c496494f4d4d52a9617a5e2fe065c696a2df578b67efed7

  • SHA512

    f13dbbd1b903831611a8d9b72ae05b4847bb109841bc4f0a807719e3249560cf29725c6b02dae89f9368edd6c5d349f07af6a0fc2740d03b2766701d04849dd1

Score
10/10

Malware Config

Extracted

Family

emotet

Botnet

Epoch2

C2

186.4.172.5:443

186.4.172.5:8080

69.164.201.54:8080

162.241.208.52:8080

167.71.10.37:8080

115.78.95.230:443

159.65.25.128:8080

37.157.194.134:443

27.147.163.188:8080

133.167.80.63:7080

212.71.234.16:8080

41.220.119.246:80

181.31.213.158:8080

85.104.59.244:20

200.71.148.138:8080

91.205.215.66:8080

87.230.19.21:8080

86.98.25.30:53

181.143.53.227:21

152.89.236.214:8080

rsa_pubkey.plain

Targets

    • Target

      Docs_381e7ef1e1748eb56b9a7316ec0eebca.14

    • Size

      262KB

    • MD5

      381e7ef1e1748eb56b9a7316ec0eebca

    • SHA1

      49d8febba985b19e0f487d2cd4096b20e9fccad5

    • SHA256

      d71b3132e0f94efd3c496494f4d4d52a9617a5e2fe065c696a2df578b67efed7

    • SHA512

      f13dbbd1b903831611a8d9b72ae05b4847bb109841bc4f0a807719e3249560cf29725c6b02dae89f9368edd6c5d349f07af6a0fc2740d03b2766701d04849dd1

    Score
    10/10

MITRE ATT&CK Matrix ATT&CK v6

Defense Evasion

Modify Registry

1
T1112

Discovery

Query Registry

4
T1012

System Information Discovery

3
T1082

Tasks