Extracted

Extracted

• • Target

    emotet_e3_566ccaf1f55f92d1cb14ba4fda8a4d23efdf2980b672c6095cd641b95570134e_2020-07-29__014905._doc

  • Size

    169KB

  • MD5

    5b4cbd726b99d3f49c5b39cea2d30ba7

  • SHA1

    2069aa5f0da17b8c877051789036759b8712edb8

  • SHA256

    566ccaf1f55f92d1cb14ba4fda8a4d23efdf2980b672c6095cd641b95570134e

  • SHA512

    0d03f301c2209fe55ee0c70755566ebb1a9767356ba6a412164bcf9e455ba3929d46bacd37a8022705fa8ef5df7051cf21e2b47a741e213c1c01952aaa2e807f

  Score

  10^/10

  trojanbankeremotet

  • Emotet

    Emotet is a trojan that is primarily spread through spam emails.

    trojanbankeremotet

  • Process spawned unexpected child process

    This typically indicates the parent process was compromised via an exploit or macro.

  • Emotet Payload

    Detects Emotet payload in memory.

  • Blacklisted process makes network request

  • Executes dropped EXE

  • Drops file in System32 directory

  behavioral1behavioral2