Extracted

Extracted

• • Target

    emotet_e3_8b8a580cd020e0bd0471666b6354c24211f043403e1924ae8ae94c1b0a630c28_2020-07-28__192059._doc

  • Size

    169KB

  • MD5

    ddad3a37c0baf5a29ca82714192d633a

  • SHA1

    abf92157c3674f7523669579fb83b2936de887b9

  • SHA256

    8b8a580cd020e0bd0471666b6354c24211f043403e1924ae8ae94c1b0a630c28

  • SHA512

    68bfa0abca5e93d43be987277469f643a89159e2d10fc31bbbe507486f02555151417ce8c29fffa51024e7cd039a7854992be34823ef68762b21bf828a36062c

  Score

  10^/10

  trojanbankeremotet

  • Emotet

    Emotet is a trojan that is primarily spread through spam emails.

    trojanbankeremotet

  • Process spawned unexpected child process

    This typically indicates the parent process was compromised via an exploit or macro.

  • Emotet Payload

    Detects Emotet payload in memory.

  • Blacklisted process makes network request

  • Executes dropped EXE

  • Drops file in System32 directory

  behavioral1behavioral2