General

  • Target

    1460-56-0x0000000000400000-0x0000000000419000-memory.dmp

  • Size

    100KB

  • Sample

    221206-3qgzaaeh36

  • MD5

    9121f8ef5057f86dcad39878465c1eca

  • SHA1

    a9083cbe326e00dc5ba6a1a15f87a4731ca682c0

  • SHA256

    0a8f6bac025bf58083a95a3d6382c1c588a42d67a93d24dd630a26347592dcc0

  • SHA512

    49f937dae749c6cf642e6881cf23cd3289c297953cfe9f01c1f2a05a16204c180896f75dbf0854378c7e20ef91ac4b171da19348831399cfab104f59317bf710

  • SSDEEP

    1536:EQ14LR8spFrd2kxP9GkYsPHmmXZxhDVSQo/l7xmGzFBnO2i8sVJTcWgLG:j+8sLd2kJ9GSZjhSz/l7cGhE2iJ3h

Score
10/10

Malware Config

Extracted

Family

emotet

Botnet

Epoch2

C2

124.240.198.66:80

186.75.241.230:80

181.143.194.138:443

45.79.188.67:8080

77.237.248.136:8080

185.142.236.163:443

63.142.253.122:8080

178.254.6.27:7080

190.211.207.11:443

78.188.105.159:21

182.176.106.43:995

178.79.161.166:443

206.189.98.125:8080

87.230.19.21:8080

80.11.163.139:443

101.187.237.217:20

190.18.146.70:80

86.98.25.30:53

92.222.125.16:7080

186.4.172.5:443

rsa_pubkey.plain

Targets

    • Target

      1460-56-0x0000000000400000-0x0000000000419000-memory.dmp

    • Size

      100KB

    • MD5

      9121f8ef5057f86dcad39878465c1eca

    • SHA1

      a9083cbe326e00dc5ba6a1a15f87a4731ca682c0

    • SHA256

      0a8f6bac025bf58083a95a3d6382c1c588a42d67a93d24dd630a26347592dcc0

    • SHA512

      49f937dae749c6cf642e6881cf23cd3289c297953cfe9f01c1f2a05a16204c180896f75dbf0854378c7e20ef91ac4b171da19348831399cfab104f59317bf710

    • SSDEEP

      1536:EQ14LR8spFrd2kxP9GkYsPHmmXZxhDVSQo/l7xmGzFBnO2i8sVJTcWgLG:j+8sLd2kJ9GSZjhSz/l7cGhE2iJ3h

    Score
    3/10

MITRE ATT&CK Matrix

Tasks