General

  • Target

    4004-150-0x0000000000E50000-0x0000000000E66000-memory.dmp

  • Size

    88KB

  • Sample

    221130-p227psbg32

  • MD5

    ec177816fa07d3508f22a9e58e245e74

  • SHA1

    5139ef4815185294b4019a8f88e33990a2befc2f

  • SHA256

    db763ff8ef5ea09fb00d24f838554de3b69cf6270d6a5d20153b710865d47d8c

  • SHA512

    113cfbf85fdb3c41f9692c1ff032b6b53ebe5184380d80b56f96410f2aa59fbbf79640ea2cdf9c692e7e6f42ce89a54ff84c4fd626d34f5d5097655dec27dfd0

  • SSDEEP

    1536:j6hLyU/XpqXwkp8EkoWrcPN+vgRDX+c0AmyGu16Mu:Gx/8XwkercPNmgRjU

Score
10/10

Malware Config

Extracted

Family

emotet

Botnet

Epoch3

C2

190.117.206.153:443

203.99.187.137:443

200.55.168.82:20

70.32.94.58:8080

213.138.100.98:8080

144.76.62.10:8080

203.99.188.203:990

201.196.15.79:990

203.99.182.135:443

176.58.93.123:80

192.241.220.183:8080

94.177.253.126:80

181.47.235.26:993

216.75.37.196:8080

95.216.207.86:7080

78.109.34.178:443

113.52.135.33:7080

216.70.88.55:8080

138.197.140.163:8080

181.113.229.139:990

rsa_pubkey.plain

Targets

    • Target

      4004-150-0x0000000000E50000-0x0000000000E66000-memory.dmp

    • Size

      88KB

    • MD5

      ec177816fa07d3508f22a9e58e245e74

    • SHA1

      5139ef4815185294b4019a8f88e33990a2befc2f

    • SHA256

      db763ff8ef5ea09fb00d24f838554de3b69cf6270d6a5d20153b710865d47d8c

    • SHA512

      113cfbf85fdb3c41f9692c1ff032b6b53ebe5184380d80b56f96410f2aa59fbbf79640ea2cdf9c692e7e6f42ce89a54ff84c4fd626d34f5d5097655dec27dfd0

    • SSDEEP

      1536:j6hLyU/XpqXwkp8EkoWrcPN+vgRDX+c0AmyGu16Mu:Gx/8XwkercPNmgRjU

    Score
    3/10

MITRE ATT&CK Matrix

Tasks