Extracted

Extracted

• • Target

    445eac6a0537d629f9fb1564dfedbe24fcd73cd97034d53ef2257ddfc9a2a0ae.doc

  • Size

    173KB

  • MD5

    f6f6b714cf2713a49b7733f3cd402957

  • SHA1

    78d1960925c523c20ab4d38b98593a5d9663aa2e

  • SHA256

    445eac6a0537d629f9fb1564dfedbe24fcd73cd97034d53ef2257ddfc9a2a0ae

  • SHA512

    e7612c80911ae4b59cea5095834acd3758642bdd17216d02d49f8589e7f1888922c1e22980409d7bf23984e5fdc78995ada3fe9e2e4f73375193a03a7972d90d

  Score

  10^/10

  trojanbankeremotet

  • Emotet

    Emotet is a trojan that is primarily spread through spam emails.

    trojanbankeremotet

  • Process spawned unexpected child process

    This typically indicates the parent process was compromised via an exploit or macro.

  • Emotet Payload

    Detects Emotet payload in memory.

  • Blacklisted process makes network request

  • Executes dropped EXE

  • Drops file in System32 directory

  behavioral1