General

  • Target

    1812-55-0x00000000003A0000-0x00000000003B7000-memory.dmp

  • Size

    92KB

  • Sample

    221207-a95v8sde2v

  • MD5

    76ad475bbc1483d0837c411a47e8cb11

  • SHA1

    e423ddfa744fe7467575c020035d6b1ccd3d4049

  • SHA256

    894c7927c56395d46f8a09f7affb748522e7ce0d465b52c1eee6a9b88d22888b

  • SHA512

    cc7b73f140ee3a61c2af84c03462e737512ddff995503e22008f9bad46276d5d2f69d2d25208efe387034ed83511b6b20739949b88e68a33c63a4565feac49a3

  • SSDEEP

    1536:e10FuM22CUWk/Y9kU40fRhB4z0S5kIacJdcimy4:AG0UWkf2Rh6IS5kI7Js

Score
10/10

Malware Config

Extracted

Family

emotet

Botnet

Epoch1

C2

110.36.234.146:80

191.82.16.60:80

91.83.93.105:8080

216.98.148.181:8080

68.183.190.199:8080

190.230.60.129:80

183.82.97.25:80

114.79.134.129:443

89.188.124.145:443

178.79.163.131:8080

76.69.29.42:80

87.106.77.40:7080

178.249.187.151:8080

62.75.143.100:7080

201.163.74.202:443

62.75.160.178:8080

181.188.149.134:80

186.0.95.172:80

217.199.160.224:8080

203.25.159.3:8080

rsa_pubkey.plain

Targets

    Tasks