Extracted

Extracted

• • Target

    emotet_e1_e8eec9e7d0334a972103b5ccb7953c6828224b7f35e551ef1673dadefbc17d11_2020-07-28__191629._doc

  • Size

    169KB

  • MD5

    b195bfdaab15b277ae370fa16b9347f3

  • SHA1

    e6170a0c0f0c8c17edf44ae675b44b814205c6ac

  • SHA256

    e8eec9e7d0334a972103b5ccb7953c6828224b7f35e551ef1673dadefbc17d11

  • SHA512

    53f007a6ea566947310cc865013ef822e18588a4c6eab7ddc98ebde42b6b6ff09fabdf3f0a0a13b7dddd23bb9ac80296b1e4323aa000fc0d409caeaf510ada6f

  Score

  10^/10

  trojanbankeremotet

  • Emotet

    Emotet is a trojan that is primarily spread through spam emails.

    trojanbankeremotet

  • Process spawned unexpected child process

    This typically indicates the parent process was compromised via an exploit or macro.

  • Emotet Payload

    Detects Emotet payload in memory.

  • Blacklisted process makes network request

  • Executes dropped EXE

  • Drops file in System32 directory

  behavioral1behavioral2