Extracted

Extracted

• • Target

    emotet_e3_c5931de5c1ad9d16b235ff7ce7c0b8f4205dcd14a81baa2aa06fc7b9d2ebdcfb_2020-07-29__044905._doc

  • Size

    169KB

  • MD5

    9f5be860db79be5d740d988924108958

  • SHA1

    85c878bc802d5b5615ff54a1375c55691ad778df

  • SHA256

    c5931de5c1ad9d16b235ff7ce7c0b8f4205dcd14a81baa2aa06fc7b9d2ebdcfb

  • SHA512

    91d64ccb1f4c530910623e83b6c103a96544e3fba96f04c9fb2e658f690b940d6c99c056285769d636053218b61f67182082a198d0d1a7703add3f696c462825

  Score

  10^/10

  trojanbankeremotet

  • Emotet

    Emotet is a trojan that is primarily spread through spam emails.

    trojanbankeremotet

  • Process spawned unexpected child process

    This typically indicates the parent process was compromised via an exploit or macro.

  • Emotet Payload

    Detects Emotet payload in memory.

  • Blacklisted process makes network request

  • Executes dropped EXE

  • Drops file in System32 directory

  behavioral1behavioral2