Extracted

• • Target
    emotet_e2_00553fae8fba9e5b1aecd90397d4626d00a03d5ce85d4b9d29d0193639af5081_2020-08-11__152341._doc
  • Size 225KB
  • SHA256 00553fae8fba9e5b1aecd90397d4626d00a03d5ce85d4b9d29d0193639af5081
  • MD5 9d866680aafacc376194009968974d97
  • SHA1 768e84cb1b38f77383b8b35afdc6413fb0f0cebe
  • SHA512 e99abb1cbe15419344aefcb95600a4a6a0a245c0f33a04c4a1addb736fa4ff1e0fa0259c3efd74e782946cb0c103e0725e229900992bdb0268d4643709bfcfcf
  • MD5 SHA1 SHA512

  Score

  10^/10

  trojanbankeremotet

  • Emotet

    Emotet is a trojan that is primarily spread through spam emails.

    trojanbankeremotet

  • Process spawned unexpected child process

    This typically indicates the parent process was compromised via an exploit or macro.

  • Emotet Payload

    Detects Emotet payload in memory.

  • Blacklisted process makes network request

  • Executes dropped EXE

  • Drops file in System32 directory

  behavioral1behavioral2