Extracted

Extracted

• • Target

    emotet_e3_cfd4925d1fa16f274e1d6f642fa217f4744b88f3eb8027a264259448884b214f_2020-07-29__015537._doc

  • Size

    169KB

  • MD5

    914e1850ca1841178a78d05fca1fde3d

  • SHA1

    2816fb8798928d57e0b7d95bc7a1941235e5820c

  • SHA256

    cfd4925d1fa16f274e1d6f642fa217f4744b88f3eb8027a264259448884b214f

  • SHA512

    04ffb9f9de7c7a75bf3e5fff0bc111842403e1dec46a2f17bdc2d4aec069f1f1a7b803eb44a7a447067245190f07cf8b45e69758540f5560df91b983ecb4db6e

  Score

  10^/10

  trojanbankeremotet

  • Emotet

    Emotet is a trojan that is primarily spread through spam emails.

    trojanbankeremotet

  • Process spawned unexpected child process

    This typically indicates the parent process was compromised via an exploit or macro.

  • Emotet Payload

    Detects Emotet payload in memory.

  • Blacklisted process makes network request

  • Executes dropped EXE

  • Drops file in System32 directory

  behavioral1behavioral2