Extracted

Extracted

• • Target

    3df7ff7733b19b6e1dddaea4e6ddee4414b2651a225c10911796609b6bec386e.doc

  • Size

    168KB

  • MD5

    c4fabe0916ed00c63edb817691bd76fb

  • SHA1

    c7d31f6758db1c7d55742d2c819b238808b50a31

  • SHA256

    3df7ff7733b19b6e1dddaea4e6ddee4414b2651a225c10911796609b6bec386e

  • SHA512

    142f73d572725f69bdb91146bd1ac6d931a43a805d286d09d65c491665098ddde806b371365ad2b706292df4393d15e77ea0164f257dc2a82e5c252f03ea033a

  Score

  10^/10

  trojanbankeremotet

  • Emotet

    Emotet is a trojan that is primarily spread through spam emails.

    trojanbankeremotet

  • Process spawned unexpected child process

    This typically indicates the parent process was compromised via an exploit or macro.

  • Emotet Payload

    Detects Emotet payload in memory.

  • Blacklisted process makes network request

  • Executes dropped EXE

  • Drops file in System32 directory

  behavioral1