General

  • Target

    1752-57-0x00000000003F0000-0x0000000000413000-memory.dmp

  • Size

    140KB

  • Sample

    230119-xq7baadh81

  • MD5

    b4760b271cb403bd5950c338295bcbef

  • SHA1

    863723837018a2aade922b5e16c33c51ef3e0f8a

  • SHA256

    5996e2318c7331fe411132d7bac4f9bb1681a046b26ee0ccd9f2e2967247442e

  • SHA512

    10168b192579dd01acd0af6a97fd0dd482d89668f4ce9bc3daef506cc18e1935b06dabd7f4f18b8db3606919013b8910e5ec15b01a1ee7ffbc840867cef7f768

  • SSDEEP

    3072:jBkvXFCiQPNG7KlEdYPU65t60/aJ6gB/+po0j:jBkfF9y4KlEKPBt60CJ6+Gpo0j

Score
10/10

Malware Config

Extracted

Family

emotet

Botnet

Epoch5

C2

5.189.160.61:443

94.177.178.26:8080

202.29.239.162:443

54.38.143.246:7080

119.59.125.140:8080

185.148.168.15:8080

188.166.229.148:443

2.58.16.87:8080

104.131.62.48:8080

103.82.248.59:7080

37.59.209.141:8080

103.133.214.242:8080

195.77.239.39:8080

128.199.192.135:8080

78.47.204.80:443

59.148.253.194:443

87.106.97.83:7080

45.71.195.104:8080

85.214.67.203:8080

139.196.72.155:8080

eck1.plain
ecs1.plain

Targets

    • Target

      1752-57-0x00000000003F0000-0x0000000000413000-memory.dmp

    • Size

      140KB

    • MD5

      b4760b271cb403bd5950c338295bcbef

    • SHA1

      863723837018a2aade922b5e16c33c51ef3e0f8a

    • SHA256

      5996e2318c7331fe411132d7bac4f9bb1681a046b26ee0ccd9f2e2967247442e

    • SHA512

      10168b192579dd01acd0af6a97fd0dd482d89668f4ce9bc3daef506cc18e1935b06dabd7f4f18b8db3606919013b8910e5ec15b01a1ee7ffbc840867cef7f768

    • SSDEEP

      3072:jBkvXFCiQPNG7KlEdYPU65t60/aJ6gB/+po0j:jBkfF9y4KlEKPBt60CJ6+Gpo0j

    Score
    1/10

MITRE ATT&CK Matrix ATT&CK v6

Discovery

Query Registry

2
T1012

Peripheral Device Discovery

1
T1120

System Information Discovery

2
T1082

Tasks