Extracted

Extracted

• • Target

    27a83b12572b1a8e36fefb5359f26b51c4da21f1ede18268f3cf499c6a960e05.doc

  • Size

    191KB

  • MD5

    bf14d3c4bc02d4188a14290d9b8907b6

  • SHA1

    2565ad56537e4d1ecc7c1bee759254e28d1331a6

  • SHA256

    27a83b12572b1a8e36fefb5359f26b51c4da21f1ede18268f3cf499c6a960e05

  • SHA512

    2ca1210a3e8ad3387b0ec5ae33c9db3a427f2e58a522bdd3ad932f874a675faf12c9532e8f55f3c9f17ace0c69390f33c5bacc53f8bcf6f8bbd0bc0657976a7f

  Score

  10^/10

  trojanbankeremotet

  • Emotet

    Emotet is a trojan that is primarily spread through spam emails.

    trojanbankeremotet

  • Process spawned unexpected child process

    This typically indicates the parent process was compromised via an exploit or macro.

  • Emotet Payload

    Detects Emotet payload in memory.

  • Blacklisted process makes network request

  • Executes dropped EXE

  • Drops file in System32 directory

  behavioral1