Extracted

Extracted

• • Target

    e2829cb03239b1922a1118d2511e5e12a455a8a8ad2effee641ed1e539420a02.doc

  • Size

    168KB

  • MD5

    a8948022eddac2efe3a035daba5bbcb7

  • SHA1

    df2c1fb9675000ee1f7504c932036fd07e7a79c9

  • SHA256

    e2829cb03239b1922a1118d2511e5e12a455a8a8ad2effee641ed1e539420a02

  • SHA512

    5f80eb160d9b67263f7b1cb91d5c307e5511732245145b4491534775cb5df8a70d5d829f3ec20b725ca0f2080bf5710407f33f179aac8b5e2287df09578f1cbd

  Score

  10^/10

  trojanbankeremotet

  • Emotet

    Emotet is a trojan that is primarily spread through spam emails.

    trojanbankeremotet

  • Process spawned unexpected child process

    This typically indicates the parent process was compromised via an exploit or macro.

  • Emotet Payload

    Detects Emotet payload in memory.

  • Blacklisted process makes network request

  • Executes dropped EXE

  • Drops file in System32 directory

  behavioral1