Extracted

Extracted

• • Target

    0c8d1998fd7ba0d37d38612d3c44e6fbf5a1d23d37430dc26b9d967b1150acb8.doc

  • Size

    169KB

  • MD5

    87d13d376d5d7e7156c9a78d0e4a9c66

  • SHA1

    910a5a41a7a5f3c5dea79007b310e927829c3f62

  • SHA256

    0c8d1998fd7ba0d37d38612d3c44e6fbf5a1d23d37430dc26b9d967b1150acb8

  • SHA512

    3e62bd014328b290b175a79bec5c08351e12ac07cf391f669b115fcf685ed1b6ef318242fce5267d32d48f27d8497216b8d43e8678633cf28783856d431088c2

  Score

  10^/10

  trojanbankeremotet

  • Emotet

    Emotet is a trojan that is primarily spread through spam emails.

    trojanbankeremotet

  • Process spawned unexpected child process

    This typically indicates the parent process was compromised via an exploit or macro.

  • Emotet Payload

    Detects Emotet payload in memory.

  • Blacklisted process makes network request

  • Executes dropped EXE

  • Drops file in System32 directory

  behavioral1