General

  • Target

    1512-55-0x0000000000360000-0x0000000000374000-memory.dmp

  • Size

    80KB

  • Sample

    221207-bfzb2abb42

  • MD5

    e5c8e4afe00a78e8ec64601997b2e1b2

  • SHA1

    40a06389db625e05a3bda1d8f26e5d8b2c4c2e2b

  • SHA256

    e6cc3dcd2299817f5aa585f5040e2370626efed725e761ce82a51a2433ef93d1

  • SHA512

    b776da412c74807577a7c2f3efcbaa3839157f77facf3217021303581a08e24b54dbd1ccf5c5c80d90e88beddbb3892cea1591d200a5364c834b82c7cc92fbac

  • SSDEEP

    1536:ciO5JouHrJ1ik/XekcYj6quIhcrqgRTjrnDyIbHKZ45kw:RQjN1ikRjVhcGgFjrDF7Z

Score
10/10

Malware Config

Extracted

Family

emotet

Botnet

Epoch2

C2

186.75.241.230:80

181.143.194.138:443

181.143.53.227:21

85.104.59.244:20

80.11.163.139:443

167.71.10.37:8080

104.131.44.150:8080

185.187.198.15:80

133.167.80.63:7080

198.199.114.69:8080

144.139.247.220:80

152.89.236.214:8080

78.24.219.147:8080

92.222.216.44:8080

46.105.131.87:80

190.226.44.20:21

182.176.132.213:8090

85.54.169.141:8080

192.81.213.192:8080

101.187.237.217:20

rsa_pubkey.plain

Targets

    Tasks