Extracted

Extracted

• • Target

    emotet_e3_7fd8cf613203f886b9caec1e8430aa43b9b7147296a23baed2921ef6619a481c_2020-07-28__235850._doc

  • Size

    169KB

  • MD5

    40aec6f1d3556dfcd0e0c5923f21a3f8

  • SHA1

    c67c5114cce46b08c5ed37bc688f286031390e45

  • SHA256

    7fd8cf613203f886b9caec1e8430aa43b9b7147296a23baed2921ef6619a481c

  • SHA512

    e1dd23cd1076b5e368a01a6a7ce5eea7cea0b3bb941f40591aa50a4b4404dacfc63921692e521664a8f043180f963b20ff517b595ea49d81dfc8d5f900f73cc4

  Score

  10^/10

  trojanbankeremotet

  • Emotet

    Emotet is a trojan that is primarily spread through spam emails.

    trojanbankeremotet

  • Process spawned unexpected child process

    This typically indicates the parent process was compromised via an exploit or macro.

  • Emotet Payload

    Detects Emotet payload in memory.

  • Blacklisted process makes network request

  • Executes dropped EXE

  • Drops file in System32 directory

  behavioral1behavioral2