General

  • Target

    1280-55-0x00000000003E0000-0x0000000000410000-memory.dmp

  • Size

    192KB

  • MD5

    163b9677ca4d2bd6d7cfdde9a0069b85

  • SHA1

    e81b0380eee0f6d9ed2dd5729089eaa6459aa216

  • SHA256

    0763709e088f6bf9add5d95499dbbc45d33eac5198e20bbf343c67385aa90009

  • SHA512

    29bb3b961d2ab501163d7196b51b989204c510cd923ad7bcfdc43d4a6f70c510378dc910778c09c64da43ac32674713c2b6986c496ca6f34f8569da6efacaf58

  • SSDEEP

    3072:JCjB6MNVSwbjhdzodnu05oO76JHgkMOPYKmnXbY59YtnJMtKNLb3:ojxSYjhGoO7sXmnwYBJEKN

Score
10/10

Malware Config

Extracted

Family

emotet

Botnet

Epoch4

C2

209.250.246.206:443

110.232.117.186:8080

164.68.99.3:8080

119.193.124.41:7080

212.237.17.99:8080

107.182.225.142:8080

185.8.212.130:7080

153.126.146.25:7080

77.81.247.144:8080

209.126.98.206:8080

201.94.166.162:443

131.100.24.231:80

45.235.8.30:8080

213.241.20.155:443

103.43.46.182:443

129.232.188.93:443

103.132.242.26:8080

151.106.112.196:8080

45.118.115.99:8080

185.4.135.165:8080

ecs1.plain
eck1.plain

Signatures

Files

  • 1280-55-0x00000000003E0000-0x0000000000410000-memory.dmp