Extracted

Extracted

• • Target

    04abc34f8660da49cfcb4daa11b45febf492755f28739bb02b2e00e51e3965e3.doc

  • Size

    168KB

  • MD5

    00c09973391153271bc0e3540cfb169f

  • SHA1

    f88e6574d6a2ce5835e25ffebe5f00eb590d92f2

  • SHA256

    04abc34f8660da49cfcb4daa11b45febf492755f28739bb02b2e00e51e3965e3

  • SHA512

    e44f269490b83168889381a114981767dea278546dfabd0b68ec3c5755c73d45eba5924d8d8dd89c8ba5c8418101b560c46943af3448acd902dabe711d3b39a8

  Score

  10^/10

  trojanbankeremotet

  • Emotet

    Emotet is a trojan that is primarily spread through spam emails.

    trojanbankeremotet

  • Process spawned unexpected child process

    This typically indicates the parent process was compromised via an exploit or macro.

  • Emotet Payload

    Detects Emotet payload in memory.

  • Blacklisted process makes network request

  • Executes dropped EXE

  • Drops file in System32 directory

  behavioral1