9e1d7cd63b0edcb4b3c4b1c86ecf477245ba82b4291bf26484fe2dd6cd9d12a1 | Triage

Submit
Reports

Overview

overview

task1

task2

Sharing

General

Target

Docs_8284e996aea8e5075256c03a93eaa6df.1
Size

281KB
Sample

191011-z5m5sdgl8j
MD5

8284e996aea8e5075256c03a93eaa6df
SHA1

296a881bdde6650d439f607293da8c63c1ad43e0
SHA256

9e1d7cd63b0edcb4b3c4b1c86ecf477245ba82b4291bf26484fe2dd6cd9d12a1
SHA512

55f7da163cac488fa9d096c19a7ab88005aaafd7588c700bd41f4fcb62becd8ad4ca8f967be7af495a0d8365779f4a92f6684884595e9f9e647ab56c17fa58a4

Score

10^/10

Task

task1

Sample

Docs_8284e996aea8e5075256c03a93eaa6df.1.doc

Resource

win7

0 signatures

Task

task2

Sample

Docs_8284e996aea8e5075256c03a93eaa6df.1.doc

Resource

win10

0 signatures

Malware Config

Targets

- Target
  
  Docs_8284e996aea8e5075256c03a93eaa6df.1
- Size
  
  281KB
- MD5
  
  8284e996aea8e5075256c03a93eaa6df
- SHA1
  
  296a881bdde6650d439f607293da8c63c1ad43e0
- SHA256
  
  9e1d7cd63b0edcb4b3c4b1c86ecf477245ba82b4291bf26484fe2dd6cd9d12a1
- SHA512
  
  55f7da163cac488fa9d096c19a7ab88005aaafd7588c700bd41f4fcb62becd8ad4ca8f967be7af495a0d8365779f4a92f6684884595e9f9e647ab56c17fa58a4
Score

10^/10
- Emotet Sync
  trojan banker
- emotet family
  family
- Modifies system certificate store
  evasion spyware trojan
- Checks system information in the registry (likely anti-VM)
- Drops Office document
  dropper exploiter maldoc
task1 task2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Install Root Certificate

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

task1

task2

© 2018-2024

Terms | Privacy