General

  • Target

    84a2e7063367694ab6cc1438a77614a37d4c72b5951aea665a9050140abde22b

  • Size

    144KB

  • Sample

    241112-zklthazmbs

  • MD5

    9d919e57a51da95863c04c615af30272

  • SHA1

    affbe4589616dd0bfcc2d8fcdbd3bb22be07a51a

  • SHA256

    84a2e7063367694ab6cc1438a77614a37d4c72b5951aea665a9050140abde22b

  • SHA512

    9719d42fa9276113ec312a5732e289cb1edbf120acb9f3091e9c8fd057cc21ec4e07815ea64e9ef0802f6e680fc6d7fa4b9101db5394852273906eb418c2dc53

  • SSDEEP

    1536:7/xB+wuvW7IevFHNJ8A5gp+7TjxFS4cxpF9yFS1UjxHdAJFf11RDnE4GK5Adyod:d0ByIUsp+7Hx0fxpF9XOYFdLnTEyod

Malware Config

Extracted

Family

emotet

Botnet

Epoch1

C2

82.76.111.249:443

116.125.120.88:443

217.160.182.191:8080

189.1.185.98:8080

189.194.58.119:80

213.181.91.224:80

219.92.13.25:80

190.6.193.152:8080

61.92.159.208:8080

209.236.123.42:8080

12.162.84.2:8080

190.147.137.153:443

104.131.103.37:8080

212.231.60.98:80

202.62.39.111:80

82.240.207.95:443

170.81.48.2:80

177.74.228.34:80

82.196.15.205:8080

114.109.179.60:80

rsa_pubkey.plain

Targets

    • Target

      84a2e7063367694ab6cc1438a77614a37d4c72b5951aea665a9050140abde22b

    • Size

      144KB

    • MD5

      9d919e57a51da95863c04c615af30272

    • SHA1

      affbe4589616dd0bfcc2d8fcdbd3bb22be07a51a

    • SHA256

      84a2e7063367694ab6cc1438a77614a37d4c72b5951aea665a9050140abde22b

    • SHA512

      9719d42fa9276113ec312a5732e289cb1edbf120acb9f3091e9c8fd057cc21ec4e07815ea64e9ef0802f6e680fc6d7fa4b9101db5394852273906eb418c2dc53

    • SSDEEP

      1536:7/xB+wuvW7IevFHNJ8A5gp+7TjxFS4cxpF9yFS1UjxHdAJFf11RDnE4GK5Adyod:d0ByIUsp+7Hx0fxpF9XOYFdLnTEyod

MITRE ATT&CK Enterprise v15

Tasks