Extracted

Extracted

• • Target

    emotet_e3_065f17c1cff199738ede64fc624bce7de1e369e0ca9f5193cdaa531763968b17_2020-07-28__183035._doc

  • Size

    168KB

  • MD5

    1ea756be5aeabb55b6ab88f33d54ad52

  • SHA1

    cf4172a0950ba5f048b7b7da365e9842b2556b93

  • SHA256

    065f17c1cff199738ede64fc624bce7de1e369e0ca9f5193cdaa531763968b17

  • SHA512

    4c7a3cf9b8b6498f16e8da77e5bac56e1ad985421123fce91cb20b5e5117978718dcd9a7e5873616d3007eda2b50a0a82fa497ebfc145eaab4602d53cd585f9b

  Score

  10^/10

  trojanbankeremotet

  • Emotet

    Emotet is a trojan that is primarily spread through spam emails.

    trojanbankeremotet

  • Process spawned unexpected child process

    This typically indicates the parent process was compromised via an exploit or macro.

  • Emotet Payload

    Detects Emotet payload in memory.

  • Blacklisted process makes network request

  • Executes dropped EXE

  • Drops file in System32 directory

  behavioral1behavioral2