General

  • Target

    840-58-0x00000000003D0000-0x00000000003EB000-memory.dmp

  • Size

    108KB

  • Sample

    230119-xlx7tagh84

  • MD5

    9106e015e7f3d5aeee8f97ebfced5025

  • SHA1

    90ef5ae1c516b950b98451549aafce84455d7033

  • SHA256

    9b1612b31c7cff304d4025b93172e17092714d676188c448c789c4d58a0dbebd

  • SHA512

    21d5253c8159402500722fc3ffff20f11cb60e465ef25ea6689a6fcc4b86269059c8f687377756b2c487b804d07d49512de4a949a58fe341207e42b262334484

  • SSDEEP

    1536:mXAl2eMpTQXgWfx1wwzcFlXThG1a41/D/C9qBPDWqvbf2q8t:mQ4NbtGZU9qRWqvF

Malware Config

Extracted

Family

emotet

Botnet

Epoch3

C2

221.147.142.214:80

188.40.170.197:80

51.38.50.144:8080

46.22.116.163:7080

190.151.5.131:443

58.27.215.3:8080

179.5.118.12:80

73.100.19.104:80

192.210.217.94:8080

192.163.221.191:8080

103.93.220.182:80

91.213.106.100:8080

190.192.39.136:80

115.79.59.157:80

190.164.135.81:80

91.83.93.103:443

188.166.220.180:7080

116.202.10.123:8080

36.91.44.183:80

77.74.78.80:443

rsa_pubkey.plain

Targets

    • Target

      840-58-0x00000000003D0000-0x00000000003EB000-memory.dmp

    • Size

      108KB

    • MD5

      9106e015e7f3d5aeee8f97ebfced5025

    • SHA1

      90ef5ae1c516b950b98451549aafce84455d7033

    • SHA256

      9b1612b31c7cff304d4025b93172e17092714d676188c448c789c4d58a0dbebd

    • SHA512

      21d5253c8159402500722fc3ffff20f11cb60e465ef25ea6689a6fcc4b86269059c8f687377756b2c487b804d07d49512de4a949a58fe341207e42b262334484

    • SSDEEP

      1536:mXAl2eMpTQXgWfx1wwzcFlXThG1a41/D/C9qBPDWqvbf2q8t:mQ4NbtGZU9qRWqvF

    Score
    1/10

MITRE ATT&CK Matrix

Tasks