Extracted

Extracted

• • Target

    4e414cc37678eae442ea1afb91809f3d0b26f5ca6ca134dfef8789e6d4529bf5.doc

  • Size

    168KB

  • MD5

    39b9e87c7d2ca5f037b913df6faeb45e

  • SHA1

    325d90d8ccabc75f9d9ae3e924fda480a8df0e9d

  • SHA256

    4e414cc37678eae442ea1afb91809f3d0b26f5ca6ca134dfef8789e6d4529bf5

  • SHA512

    43f5f4f3541fb47ae1ffbe3c591db0677db6f1c19a42a518c97c81e2f14145bd0deb0cf86b2968f8b1c489c129cc1493163b24295addd67f5494e19ddf218d08

  Score

  10^/10

  trojanbankeremotet

  • Emotet

    Emotet is a trojan that is primarily spread through spam emails.

    trojanbankeremotet

  • Process spawned unexpected child process

    This typically indicates the parent process was compromised via an exploit or macro.

  • Emotet Payload

    Detects Emotet payload in memory.

  • Blacklisted process makes network request

  • Executes dropped EXE

  • Drops file in System32 directory

  behavioral1