2018-06-04 #Emotet sample malware

2018-06-04 #Emotet sample malware

-----
interesting in memory strings
-----

0x12f274 (28): 24.217.117.217
0x231170 (34): fondueutilman.exe
0x27d2fa (118): ldogs,domino,honda,oksana,sweet,00000000,1994,brittany,budl
0x27d37a (118): disney,francis,wildcats,freeuser,money1,vladimir,77777777,b
0x27d3fa (118): ,kawasaki,russia,college,galore,54321,andre,infinity,raider
0x27d47a (118): ,nigger,patches,shit,zaq12wsx,141414,55555555,claudia,jupit
0x27d4fa (118): drum,homer,alexander,assman,bigred,franklin,howard,rascal,h
0x27d57a (118): ,passport,bastard,mnbvcxz,passion,softball,4321,98765432,an
0x27d5fa (118): ,leslie,rocky,sandman,vfhbyf,1985,adrian,hummer,qwerty12,09
0x27d67a (222): 1979,marshall,allison,king,sucker,system,vikings,marley,natalie,scotland,spirit,liberty,mercury,penguin,semperf
0x27d894 (26): \LocalService
0x27d8d8 (3776): sec Policy Agetargate,ruslan,123789,a12345,3333,denise,lizard,lucky1,security,abcdefg,melanie,paul,anderson,buddha,mozart,teresa,1969,aaaaaaaa,patricia,popcorn,qwe123,frank,reddog,12345qwert,mark,boobs,hitman,porno,kevin,242424,courtney,diesel,stanley,westside,shorty,music,1984,pamela,svetlana,gregory,october,1986,bill,eagle1,stephen,walker,420420,chevy,badass,hawaii,rock,147852,billy,champion,jake,jester,tester,1232323q,alaska,friday,maryjane,badger,spitfire,vanessa,google,hotrod,010203,forest,friend,scotty,hello1,genesis,bitches,einstein,action,drummer,viper,dave,barbara,caroline,hahaha,drowssap,qweasdzxc,1987,brian,marcus,12345q,bollocks,simple,147258,boobies,poohbear,star,147147,enigma,stalker,baby,pimpin,qwerty1,0987654321,horses,sabrina,ou812,racing,sammy,kristina,111222,carmen,sharon,speedy,kimberly,christin,aaaa,asd123,lacrosse,vampire,cool,genius,maximus,poopoo,surfer,magnum,friends,yankee,carolina,cock,michigan,dreams,mexico,montana,samuel,5555,goober,paradise,bronco,steve,alexande,peter,qwertyu,carter,member,metallica,pantera,buffalo,snickers,andrey,cherry,doggie,gibson,lovely,scott,spencer,flyers,nelson,beer,explorer,lol123,147258369,fluffy,eclipse,gabriel,louise,school,12121212,family,dickhead,1313,beatles,donald,babygirl,cassie,little,birdie,celtic,private,cartman,broncos,sergey,lasvegas,asdf1234,minecraft,november,fire,testing,bubbles,chance,guinness,marvin,runner,topgun,destiny,digital,nintendo,tits,williams,trinity,pumpkin,bigboy,redwings,therock,saturn,loveme,willow,donkey,hooters,sniper,cricket,blazer,playboy,walter,007007,pakistan,00000,abcdef,lover,snowball,heaven,12qwaszx,travis,police,voyager,789456123,green,fish,power,blink182,darkness,xavier,online,phantom,platinum,animal,brooklyn,qqqqqq,lifehack,1988,1993,airborne,buddy,august,tomcat,fred,beaver,godzilla,shelby,braves,copper,golf,kitten,girls,315475,skippy,apollo,magic,11223344,25
0x3eaab0 (130): C:\Users\xxx\AppData\Local\Microsoft\Windows\fondueutilman.exe