General

  • Target

    1228-56-0x0000000000200000-0x0000000000222000-memory.dmp

  • Size

    136KB

  • Sample

    230119-x265naea7x

  • MD5

    cfa9622b583d8bf988f6494c96f11649

  • SHA1

    4502ad14add7fcc8322911958152d1dcf1bb6276

  • SHA256

    e0c569fdb90f01b3215e1be2fbebdd6a06c89a6ac2fc7a15f2bc27adebcd9b65

  • SHA512

    ad1a525a0ce19cc4f29c8b91abecf7e50e369f496f458fc258313a5d7cbac2b36d56fd91dce32a8d8fcbf9883926a56f2206bf1310f4b8b015ec56452ca552f6

  • SSDEEP

    3072:dxrPkLQvtZSLf7vSjgR9l687/W3bLn2F4pVpSjb24cD:d9cQlyf7vSq9l42mnUjbE

Score
10/10

Malware Config

Extracted

Family

emotet

Botnet

Epoch1

C2

184.66.18.83:80

202.187.222.40:80

167.71.148.58:443

211.215.18.93:8080

1.234.65.61:80

80.15.100.37:80

155.186.9.160:80

172.104.169.32:8080

110.39.162.2:443

12.162.84.2:8080

181.136.190.86:80

68.183.190.199:8080

191.223.36.170:80

190.45.24.210:80

81.213.175.132:80

181.120.29.49:80

82.76.111.249:443

177.23.7.151:80

95.76.153.115:80

93.148.247.169:80

rsa_pubkey.plain

Targets

    • Target

      1228-56-0x0000000000200000-0x0000000000222000-memory.dmp

    • Size

      136KB

    • MD5

      cfa9622b583d8bf988f6494c96f11649

    • SHA1

      4502ad14add7fcc8322911958152d1dcf1bb6276

    • SHA256

      e0c569fdb90f01b3215e1be2fbebdd6a06c89a6ac2fc7a15f2bc27adebcd9b65

    • SHA512

      ad1a525a0ce19cc4f29c8b91abecf7e50e369f496f458fc258313a5d7cbac2b36d56fd91dce32a8d8fcbf9883926a56f2206bf1310f4b8b015ec56452ca552f6

    • SSDEEP

      3072:dxrPkLQvtZSLf7vSjgR9l687/W3bLn2F4pVpSjb24cD:d9cQlyf7vSq9l42mnUjbE

    Score
    1/10

MITRE ATT&CK Matrix

Tasks