Extracted

Extracted

• • Target

    emotet_e3_8caad6920379901e4d096cca5f10d76e8ead6ea3a4ee106ebed0cdf9b07a1bf6_2020-07-29__031024._doc

  • Size

    169KB

  • MD5

    96162b113771bb4c1a242ee951585e1a

  • SHA1

    e8a8c966cdf15075d9d24f94a5709aa6729a3117

  • SHA256

    8caad6920379901e4d096cca5f10d76e8ead6ea3a4ee106ebed0cdf9b07a1bf6

  • SHA512

    f4053a4061f87b24b0b4791b1f400733ffe570a929a972bc51d38cedf3c22e1027fce3e4458f17147d91b4759128c8a67202446340a6ba7b47e65097bb29fe34

  Score

  10^/10

  trojanbankeremotet

  • Emotet

    Emotet is a trojan that is primarily spread through spam emails.

    trojanbankeremotet

  • Process spawned unexpected child process

    This typically indicates the parent process was compromised via an exploit or macro.

  • Emotet Payload

    Detects Emotet payload in memory.

  • Blacklisted process makes network request

  • Executes dropped EXE

  • Drops file in System32 directory

  behavioral1behavioral2