General

  • Target

    Docs_381e7ef1e1748eb56b9a7316ec0eebca.2

  • Size

    262KB

  • Sample

    191015-rm7f5a231e

  • MD5

    381e7ef1e1748eb56b9a7316ec0eebca

  • SHA1

    49d8febba985b19e0f487d2cd4096b20e9fccad5

  • SHA256

    d71b3132e0f94efd3c496494f4d4d52a9617a5e2fe065c696a2df578b67efed7

  • SHA512

    f13dbbd1b903831611a8d9b72ae05b4847bb109841bc4f0a807719e3249560cf29725c6b02dae89f9368edd6c5d349f07af6a0fc2740d03b2766701d04849dd1

Score
10/10

Malware Config

Extracted

Family

emotet

Botnet

Epoch2

C2

200.51.94.251:80

200.113.106.18:465

162.241.208.52:8080

167.71.10.37:8080

104.131.44.150:8080

94.192.225.46:80

138.201.140.110:8080

181.143.194.138:443

190.145.67.134:8090

104.131.11.150:8080

189.209.217.49:80

80.11.163.139:21

190.108.228.48:990

159.65.25.128:8080

47.41.213.2:22

67.225.229.55:8080

24.45.195.162:7080

85.54.169.141:8080

211.63.71.72:8080

87.106.136.232:8080

rsa_pubkey.plain

Targets

    • Target

      Docs_381e7ef1e1748eb56b9a7316ec0eebca.2

    • Size

      262KB

    • MD5

      381e7ef1e1748eb56b9a7316ec0eebca

    • SHA1

      49d8febba985b19e0f487d2cd4096b20e9fccad5

    • SHA256

      d71b3132e0f94efd3c496494f4d4d52a9617a5e2fe065c696a2df578b67efed7

    • SHA512

      f13dbbd1b903831611a8d9b72ae05b4847bb109841bc4f0a807719e3249560cf29725c6b02dae89f9368edd6c5d349f07af6a0fc2740d03b2766701d04849dd1

    Score
    10/10

MITRE ATT&CK Matrix ATT&CK v6

Defense Evasion

Modify Registry

1
T1112

Discovery

Query Registry

4
T1012

System Information Discovery

3
T1082

Tasks