Extracted

Extracted

• • Target

    453c518f7cf37df2fee6ebb0d26ad8073f7498ccf7f75ecc31612d95c879b5b9.doc

  • Size

    168KB

  • MD5

    7f853a2aee0509b57ef50410c43cd1bf

  • SHA1

    4698c967f7b8b9d13befb15af1b6a4b8ebacf699

  • SHA256

    453c518f7cf37df2fee6ebb0d26ad8073f7498ccf7f75ecc31612d95c879b5b9

  • SHA512

    6264c6e12c8f5d006e531c4791fbe717b653fa22f0531260ecfd7037435ff8e5b550bcfe7e6a155ef03007b5da2db04d14fdf86a6b827dd58f5af9f1febaba07

  Score

  10^/10

  trojanbankeremotet

  • Emotet

    Emotet is a trojan that is primarily spread through spam emails.

    trojanbankeremotet

  • Process spawned unexpected child process

    This typically indicates the parent process was compromised via an exploit or macro.

  • Emotet Payload

    Detects Emotet payload in memory.

  • Blacklisted process makes network request

  • Executes dropped EXE

  • Drops file in System32 directory

  behavioral1