Extracted

Extracted

• • Target

    emotet_e3_a1ae928aefc8d72b42048d6f5a1aa4d24a8e6872509a214de6c668301671a2b7_2020-07-29__004024._doc

  • Size

    170KB

  • MD5

    ae4bd2ff94e6d0155ef2c80bc0f439c7

  • SHA1

    3f254fc78900787908dbed215a3616a1d24750a4

  • SHA256

    a1ae928aefc8d72b42048d6f5a1aa4d24a8e6872509a214de6c668301671a2b7

  • SHA512

    25394a7068cd5e0de7ac2d194adb0dbdf40274143cd4232d54a0509b7b899f418916d991c6357bb5cfdb4a1d56451f582bf68526b9f9c4ffa5a0f5f29d0b54a2

  Score

  10^/10

  trojanbankeremotet

  • Emotet

    Emotet is a trojan that is primarily spread through spam emails.

    trojanbankeremotet

  • Process spawned unexpected child process

    This typically indicates the parent process was compromised via an exploit or macro.

  • Emotet Payload

    Detects Emotet payload in memory.

  • Blacklisted process makes network request

  • Executes dropped EXE

  • Drops file in System32 directory

  behavioral1behavioral2