Extracted

Extracted

• • Target

    db038caf7ec70d1ba7ea29fa7407808af17f4e0de3bf1308f3d7b92be2ae3731.doc

  • Size

    168KB

  • MD5

    a5621aedc6075f9e23856ddb76cb1a95

  • SHA1

    976fdd67e6e694e57741880019b1867f1b668945

  • SHA256

    db038caf7ec70d1ba7ea29fa7407808af17f4e0de3bf1308f3d7b92be2ae3731

  • SHA512

    cd85780dc3b6a344ea2e3d954739f551b99b9ed0d90e39d7e17d9b14cf7eb377f13cbc076058feb9f80cbc8aa98ae88f0ae24c76de1a06d41f889ee784dd3b9c

  Score

  10^/10

  trojanbankeremotet

  • Emotet

    Emotet is a trojan that is primarily spread through spam emails.

    trojanbankeremotet

  • Process spawned unexpected child process

    This typically indicates the parent process was compromised via an exploit or macro.

  • Emotet Payload

    Detects Emotet payload in memory.

  • Blacklisted process makes network request

  • Executes dropped EXE

  • Drops file in System32 directory

  behavioral1