General

  • Target

    1672-55-0x00000000002D0000-0x00000000002E7000-memory.dmp

  • Size

    92KB

  • Sample

    221207-dgafeahg36

  • MD5

    22daf48f1d39d3aa7d4db985ace0cd18

  • SHA1

    a68458c50fc7b6f1f7a80eaccdfaa7b49c4206fd

  • SHA256

    71a7850c9f24355886adf03145e364b689e2bb82dd668dbd00a17e201994a3a9

  • SHA512

    a408766763ac21a7da1f6472cc1fd52c92300a7dfc6136da1f580a97414b590fb55763add4ccffab09dce66f00e2abc561902b797364d754249a659602296dff

  • SSDEEP

    1536:MrqaUVWPz37MUzkZIkk4m4fMhBFz0n7waePssU2b9:c54UzkCqMhvIn7wZP

Score
10/10

Malware Config

Extracted

Family

emotet

Botnet

Epoch1

C2

181.59.253.20:21

14.160.93.230:80

74.208.68.48:8080

104.131.58.132:8080

68.183.190.199:8080

62.75.143.100:7080

159.203.204.126:8080

151.80.142.33:80

123.168.4.66:22

46.28.111.142:7080

46.101.212.195:8080

183.82.97.25:80

190.10.194.42:8080

217.199.160.224:8080

186.1.41.111:443

185.86.148.222:8080

185.187.198.10:8080

200.57.102.71:8443

114.79.134.129:443

80.85.87.122:8080

rsa_pubkey.plain

Targets

    Tasks