General

  • Target

    2020-59-0x0000000000380000-0x0000000000390000-memory.dmp

  • Size

    64KB

  • Sample

    230119-x21mwaea7w

  • MD5

    4e85d169e761e536eecfcf9f13b739b4

  • SHA1

    78153f1afcb09bb2d52ee01525ca00a0e1d92ad1

  • SHA256

    f1c70a108603e200a95547f677cb6ad4b3d693f176c2f0e177e305e09ec52023

  • SHA512

    1d306713925c8573a3da043661faa5a0d79c082e2cc2106aba58ce0d95b5828bbfafc9d7d8fff0e6413bee5d8246e0ea912c3b726f88bf2f4592857008f66db0

  • SSDEEP

    768:ub4jkic0RG6URdPyzMI+zfuA2gwnf5zKfuS92SfNnOUJ2NSLo23:Sh0g6EdKzMI+ygwf58uk1nbo

Malware Config

Extracted

Family

emotet

Botnet

Epoch1

C2

12.163.208.58:80

45.33.35.74:8080

87.106.253.248:8080

192.241.146.84:8080

190.115.18.139:8080

65.36.62.20:80

170.81.48.2:80

83.169.21.32:7080

185.232.182.218:80

190.2.31.172:80

77.106.157.34:8080

82.230.1.24:80

202.4.58.197:80

201.213.177.139:80

78.249.119.122:80

123.51.47.18:80

77.90.136.129:8080

60.93.23.51:80

152.169.22.67:80

190.117.79.209:80

rsa_pubkey.plain

Targets

    • Target

      2020-59-0x0000000000380000-0x0000000000390000-memory.dmp

    • Size

      64KB

    • MD5

      4e85d169e761e536eecfcf9f13b739b4

    • SHA1

      78153f1afcb09bb2d52ee01525ca00a0e1d92ad1

    • SHA256

      f1c70a108603e200a95547f677cb6ad4b3d693f176c2f0e177e305e09ec52023

    • SHA512

      1d306713925c8573a3da043661faa5a0d79c082e2cc2106aba58ce0d95b5828bbfafc9d7d8fff0e6413bee5d8246e0ea912c3b726f88bf2f4592857008f66db0

    • SSDEEP

      768:ub4jkic0RG6URdPyzMI+zfuA2gwnf5zKfuS92SfNnOUJ2NSLo23:Sh0g6EdKzMI+ygwf58uk1nbo

    Score
    1/10

MITRE ATT&CK Matrix

Tasks