General

  • Target

    2040-59-0x0000000000300000-0x0000000000310000-memory.dmp

  • Size

    64KB

  • Sample

    221027-r9xnascea8

  • MD5

    ca1cd0a531f533f2f41e5cb1bbf4a3a6

  • SHA1

    dc14cafb15cb5b7b4114af7f5e1d1bc858a3cd68

  • SHA256

    5852ce4cfd2e3e357baf1c7bbf2207cb5ddc4f7525c4f5c9201900dd97447b25

  • SHA512

    857bc710f187ffc9531584f5abcd40fab07d6b53569290577c3e136a8c333d24037f6c322bc6f94471c78acbb88cbb7f41638e56446e428e2634065963aad121

  • SSDEEP

    1536:k1Evhdg5aDTO1a9KXCMo024PNR2iqH3nYzEFZPv1M:Pc+KSENRnSS

Malware Config

Extracted

Family

emotet

Botnet

Epoch1

C2

74.136.144.133:80

51.38.124.206:80

178.79.163.131:8080

82.196.15.205:8080

212.71.237.140:8080

67.247.242.247:80

87.106.46.107:8080

104.131.103.37:8080

83.169.21.32:7080

45.161.242.102:80

110.142.219.51:80

45.173.88.33:80

187.162.248.237:80

5.196.35.138:7080

72.47.248.48:7080

186.103.141.250:443

98.13.75.196:80

77.90.136.129:8080

186.70.127.199:8090

152.169.22.67:80

rsa_pubkey.plain

Targets

    • Target

      2040-59-0x0000000000300000-0x0000000000310000-memory.dmp

    • Size

      64KB

    • MD5

      ca1cd0a531f533f2f41e5cb1bbf4a3a6

    • SHA1

      dc14cafb15cb5b7b4114af7f5e1d1bc858a3cd68

    • SHA256

      5852ce4cfd2e3e357baf1c7bbf2207cb5ddc4f7525c4f5c9201900dd97447b25

    • SHA512

      857bc710f187ffc9531584f5abcd40fab07d6b53569290577c3e136a8c333d24037f6c322bc6f94471c78acbb88cbb7f41638e56446e428e2634065963aad121

    • SSDEEP

      1536:k1Evhdg5aDTO1a9KXCMo024PNR2iqH3nYzEFZPv1M:Pc+KSENRnSS

    Score
    1/10

MITRE ATT&CK Matrix

Tasks