Extracted

Extracted

• • Target

    aeafb326344aca4ac83a82ebda95783a5c41457a0ba6fde407cf165e6e14df96.doc

  • Size

    169KB

  • MD5

    680783949442e16b77e16d82f858f15a

  • SHA1

    c2ce75b807d921c55a574d1398ead3d169459149

  • SHA256

    aeafb326344aca4ac83a82ebda95783a5c41457a0ba6fde407cf165e6e14df96

  • SHA512

    6da599c202c09f90076d60524979a5713aa858a528467af9b6422506b5ac122db14e7460082440cb90e5592725d0cf05e6f1f18d1a9cbd7a907ea6b48c985f2f

  Score

  10^/10

  trojanbankeremotet

  • Emotet

    Emotet is a trojan that is primarily spread through spam emails.

    trojanbankeremotet

  • Process spawned unexpected child process

    This typically indicates the parent process was compromised via an exploit or macro.

  • Emotet Payload

    Detects Emotet payload in memory.

  • Blacklisted process makes network request

  • Executes dropped EXE

  • Drops file in System32 directory

  behavioral1