Extracted

Extracted

• • Target

    6281375ab3f9f85c35ca6804214d95330fc4d34d3e46ddeea3c4f1e166f0db31.doc

  • Size

    168KB

  • MD5

    1ca734c12179f1a2442ac24c500c722e

  • SHA1

    45c4c0a0091766b63a10e4d2c3b24fe9e3a0231c

  • SHA256

    6281375ab3f9f85c35ca6804214d95330fc4d34d3e46ddeea3c4f1e166f0db31

  • SHA512

    30da5d54057948d89e6f050d155cef9480c595b1ef557514dc0b610a30cae530ab2a7b6ebb8633eb3428d59df72e5e851efbfac69ffbd4111acca252ef850f1c

  Score

  10^/10

  trojanbankeremotet

  • Emotet

    Emotet is a trojan that is primarily spread through spam emails.

    trojanbankeremotet

  • Process spawned unexpected child process

    This typically indicates the parent process was compromised via an exploit or macro.

  • Emotet Payload

    Detects Emotet payload in memory.

  • Blacklisted process makes network request

  • Executes dropped EXE

  • Drops file in System32 directory

  behavioral1