Extracted

Extracted

• • Target

    emotet_e3_876167bf1cb3915fddef23b114e34bbf410a402311fa5e5ef7d85bba1a80b65c_2020-07-29__002022._doc

  • Size

    169KB

  • MD5

    c90aa17a05720282dd9bc7e3f3f02f9a

  • SHA1

    7e747c40b86931bc21ce2217b616050d0e3874e1

  • SHA256

    876167bf1cb3915fddef23b114e34bbf410a402311fa5e5ef7d85bba1a80b65c

  • SHA512

    37b42c2967d7f53389440f2c023ebb0dd7d12fea940c67864752f438cd417ad84b0ebb847444670b11021007f9f522bcf45876ff7ef7f6460533827ccb88907c

  Score

  10^/10

  trojanbankeremotet

  • Emotet

    Emotet is a trojan that is primarily spread through spam emails.

    trojanbankeremotet

  • Process spawned unexpected child process

    This typically indicates the parent process was compromised via an exploit or macro.

  • Emotet Payload

    Detects Emotet payload in memory.

  • Blacklisted process makes network request

  • Executes dropped EXE

  • Drops file in System32 directory

  behavioral1behavioral2