General

  • Target

    1744-54-0x0000000000260000-0x0000000000277000-memory.dmp

  • Size

    92KB

  • Sample

    221207-aamwdaaf6w

  • MD5

    f81debff52445c26a312a3e3b2da03a7

  • SHA1

    f06f51b3a106561436bfe8644d3115453f9930f8

  • SHA256

    347476dbd1fe0e9dad962cf7d1df601d030da4ca018f5c1f8c92244f8e2bf83e

  • SHA512

    65a08abcd3b8a428364d31770ce424d01c53f8b8a1b393fa22c0726ecf51b182a999270a1c24c051242d4dc796858f9f4c7a8da2d004e0cd2a7867884c4dcaa6

  • SSDEEP

    1536:Ot0pze0y6yUyk/gxk84EfVhBkz0OKoaqdQCqys:IIfcUykrmVhOIOKol8

Score
10/10

Malware Config

Extracted

Family

emotet

Botnet

Epoch1

C2

110.36.234.146:80

191.82.16.60:80

91.83.93.105:8080

216.98.148.181:8080

68.183.190.199:8080

190.230.60.129:80

183.82.97.25:80

114.79.134.129:443

89.188.124.145:443

178.79.163.131:8080

76.69.29.42:80

87.106.77.40:7080

178.249.187.151:8080

62.75.143.100:7080

201.163.74.202:443

62.75.160.178:8080

181.188.149.134:80

186.0.95.172:80

217.199.160.224:8080

203.25.159.3:8080

rsa_pubkey.plain

Targets

    Tasks