Extracted

Extracted

• • Target

    b84c6bd02a1ba09919957c35ddf7fda80c70f9073269ad8ea26ae09464d96167.doc

  • Size

    169KB

  • MD5

    f8715f7ea35bae3d702c74c0622639a9

  • SHA1

    a2aeaa14f52f4656fd1fef788e96a1a9ef1d5081

  • SHA256

    b84c6bd02a1ba09919957c35ddf7fda80c70f9073269ad8ea26ae09464d96167

  • SHA512

    07d5b357f82a59fab98ce7ee5bba284eb6c76d24b3a211d0c19c4a39810171ca2aada741843240d2c56fab179d261eb1e7659c42e9aa0806158a76ce14d52743

  Score

  10^/10

  trojanbankeremotet

  • Emotet

    Emotet is a trojan that is primarily spread through spam emails.

    trojanbankeremotet

  • Process spawned unexpected child process

    This typically indicates the parent process was compromised via an exploit or macro.

  • Emotet Payload

    Detects Emotet payload in memory.

  • Blacklisted process makes network request

  • Executes dropped EXE

  • Drops file in System32 directory

  behavioral1