Extracted

Extracted

• • Target

    5af425ee29c2ee4cbba1fd5422820fac2031661cd7d330abc3095b5bf4b5f4cf.doc

  • Size

    170KB

  • MD5

    4cab25a9b9f1387aa9f6a8d60207df5b

  • SHA1

    ffa4422e55133bf75176251f506ff5f51f51a630

  • SHA256

    5af425ee29c2ee4cbba1fd5422820fac2031661cd7d330abc3095b5bf4b5f4cf

  • SHA512

    ae3eb7e1ddb2675603283e67add4bf59dad0f575518344eb608f7bfd2a707a81d22116b9d7547fcf6bdeb22b4b5af3b4a8d328e0a61d0523e91c447d2a1386cd

  Score

  10^/10

  trojanbankeremotet

  • Emotet

    Emotet is a trojan that is primarily spread through spam emails.

    trojanbankeremotet

  • Process spawned unexpected child process

    This typically indicates the parent process was compromised via an exploit or macro.

  • Emotet Payload

    Detects Emotet payload in memory.

  • Blacklisted process makes network request

  • Executes dropped EXE

  • Drops file in System32 directory

  behavioral1