General

  • Target

    1140-56-0x0000000000400000-0x0000000000414000-memory.dmp

  • Size

    80KB

  • Sample

    221207-cslgdaab3z

  • MD5

    9a35de0911c231690c0f74eb00f6bfda

  • SHA1

    c8073dc3a5c13a3e224597bffd2b3aa7eebda337

  • SHA256

    3cda04a56cdfbb7c6f7c69fa58374acc558bd7f3154a2797d6336443a0d6aa16

  • SHA512

    d20fd0f8f294c127dcb74d933d66eb87a50e32a6a14a20e535e4b2a36389abebc411850a3c3001b63917797bb9cfda4f1676ecfb32ed2fc3691c25268906febc

  • SSDEEP

    1536:zKlUb+Dm4s9hN1YkPDckM8HsquOBcrqqRTVrdnsqiMSpkY:OI4sZ1YkPH1BcGqFVrBGp

Score
10/10

Malware Config

Extracted

Family

emotet

Botnet

Epoch2

C2

91.121.116.137:443

80.79.23.144:443

192.254.173.31:8080

27.4.80.183:443

31.12.67.62:7080

95.128.43.213:8080

94.192.225.46:80

190.108.228.48:990

186.4.172.5:8080

87.230.19.21:8080

136.243.177.26:8080

185.94.252.13:443

206.189.98.125:8080

190.18.146.70:80

186.75.241.230:80

94.205.247.10:80

211.63.71.72:8080

190.186.203.55:80

115.78.95.230:443

212.71.234.16:8080

rsa_pubkey.plain

Targets

    • Target

      1140-56-0x0000000000400000-0x0000000000414000-memory.dmp

    • Size

      80KB

    • MD5

      9a35de0911c231690c0f74eb00f6bfda

    • SHA1

      c8073dc3a5c13a3e224597bffd2b3aa7eebda337

    • SHA256

      3cda04a56cdfbb7c6f7c69fa58374acc558bd7f3154a2797d6336443a0d6aa16

    • SHA512

      d20fd0f8f294c127dcb74d933d66eb87a50e32a6a14a20e535e4b2a36389abebc411850a3c3001b63917797bb9cfda4f1676ecfb32ed2fc3691c25268906febc

    • SSDEEP

      1536:zKlUb+Dm4s9hN1YkPDckM8HsquOBcrqqRTVrdnsqiMSpkY:OI4sZ1YkPH1BcGqFVrBGp

    Score
    3/10

MITRE ATT&CK Matrix

Tasks