Overview

overview

10

Static

static

8

emotet_doc

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    a0165ea1b57f030288f96955e61a5b30ba44c8d530cb1a494d14209f41184849.doc

  • Size

    189KB

  • Sample

    200717-a67ffzpx7e

  • MD5

    75790274b135340584eb1ee980d6de21

  • SHA1

    2ec7065713875d70fda27341aee4470e07d574a9

  • SHA256

    a0165ea1b57f030288f96955e61a5b30ba44c8d530cb1a494d14209f41184849

  • SHA512

    17c9dbe88618dd46a31f7ed0cea97aee6f3dd2fc8efb9fb6abc82eb2a8f4f485c27e34c010373e2eda6a452f03a4452cce4e70c2fc1aa4345d0864e5ee08b470

Score
10/10
macro

Malware Config

Targets

    • Target

      a0165ea1b57f030288f96955e61a5b30ba44c8d530cb1a494d14209f41184849.doc

    • Size

      189KB

    • MD5

      75790274b135340584eb1ee980d6de21

    • SHA1

      2ec7065713875d70fda27341aee4470e07d574a9

    • SHA256

      a0165ea1b57f030288f96955e61a5b30ba44c8d530cb1a494d14209f41184849

    • SHA512

      17c9dbe88618dd46a31f7ed0cea97aee6f3dd2fc8efb9fb6abc82eb2a8f4f485c27e34c010373e2eda6a452f03a4452cce4e70c2fc1aa4345d0864e5ee08b470

    Score
    10/10

    • Process spawned unexpected child process

      This typically indicates the parent process was compromised via an exploit or macro.

    behavioral1

MITRE ATT&CK Enterprise v6

Tasks