Extracted

Extracted

• • Target

    3c8c7014132cefc7b23e620b1742e102960b0baf8e1bd29fa53e330ba92de035.doc

  • Size

    169KB

  • MD5

    b94e35b51e3dfe6edc969c294bb7988c

  • SHA1

    145db004396ed9d98699bded13a9c7de993f2e1f

  • SHA256

    3c8c7014132cefc7b23e620b1742e102960b0baf8e1bd29fa53e330ba92de035

  • SHA512

    34d9b1f9116083f88121968ae3e1d4fc69da47088f9fcbc34c1b79dfec1c2909ad908679992743142ac309dd0078bd4d47b4ac86b68256a20b70a0675bbdd6b7

  Score

  10^/10

  trojanbankeremotet

  • Emotet

    Emotet is a trojan that is primarily spread through spam emails.

    trojanbankeremotet

  • Process spawned unexpected child process

    This typically indicates the parent process was compromised via an exploit or macro.

  • Emotet Payload

    Detects Emotet payload in memory.

  • Blacklisted process makes network request

  • Executes dropped EXE

  • Drops file in System32 directory

  behavioral1