Extracted

Extracted

• • Target

    b685b9baa5ed208c142e70cf07f7dd97d78ae5de3104da2a31c9f2278d4c6bd5.doc

  • Size

    170KB

  • MD5

    d73a0e6175f48f880b632db663122763

  • SHA1

    81946bbfea207753b2a434e2bdb7b2600ffc52aa

  • SHA256

    b685b9baa5ed208c142e70cf07f7dd97d78ae5de3104da2a31c9f2278d4c6bd5

  • SHA512

    a420c59fa4d3d23a8d48e56a192ef6f52b7faec47260883374d6ee37f0c3843bb2fce27625e9557f17fb033e0b84e2a84b1cb930f869342d5cc4d4e6def6b68f

  Score

  10^/10

  trojanbankeremotet

  • Emotet

    Emotet is a trojan that is primarily spread through spam emails.

    trojanbankeremotet

  • Process spawned unexpected child process

    This typically indicates the parent process was compromised via an exploit or macro.

  • Emotet Payload

    Detects Emotet payload in memory.

  • Blacklisted process makes network request

  • Executes dropped EXE

  • Drops file in System32 directory

  behavioral1