Extracted

Extracted

• • Target

    emotet_e3_61042fc848e7f5df1d3406af0d43150378b686a0c5212b9b66ff5df4f5e6b6bc_2020-07-29__011005._doc

  • Size

    168KB

  • MD5

    63021d0fe5e7ef600e8e096c2df7796f

  • SHA1

    7063ae314f9f4ec8f424364d186e4959202f33a7

  • SHA256

    61042fc848e7f5df1d3406af0d43150378b686a0c5212b9b66ff5df4f5e6b6bc

  • SHA512

    9a1ec15be48172aa765c84575f341b4e9674ef23f27d2e10df68b652e4ac631e10c8994856de9be09d3563cfd6f6a4b8f7755c31facfaccd945e3e68157e81b8

  Score

  10^/10

  trojanbankeremotet

  • Emotet

    Emotet is a trojan that is primarily spread through spam emails.

    trojanbankeremotet

  • Process spawned unexpected child process

    This typically indicates the parent process was compromised via an exploit or macro.

  • Emotet Payload

    Detects Emotet payload in memory.

  • Blacklisted process makes network request

  • Executes dropped EXE

  • Drops file in System32 directory

  behavioral1behavioral2