Extracted

• • Target
    emotet_e2_59c0eb17a6928f0d5a9c1bb79ff1de6b854de12390cff96feb32aa0622010c0f_2020-08-11__131621._doc
  • Size 224KB
  • SHA256 59c0eb17a6928f0d5a9c1bb79ff1de6b854de12390cff96feb32aa0622010c0f
  • MD5 5276fd6c533fa30aae5eda4839dd5526
  • SHA1 22b936751f14a84d10745838c78d4ee6fc079fdc
  • SHA512 00e3c2fad88cee414f173c41dbbed4f4ea99353913746dbd81d2ff25b2d96423af77c133c6ae8ef3e647c30290234152e941167c47bbd66fcb4416cbbad59227
  • MD5 SHA1 SHA512

  Score

  10^/10

  trojanbankeremotet

  • Emotet

    Emotet is a trojan that is primarily spread through spam emails.

    trojanbankeremotet

  • Process spawned unexpected child process

    This typically indicates the parent process was compromised via an exploit or macro.

  • Emotet Payload

    Detects Emotet payload in memory.

  • Blacklisted process makes network request

  • Executes dropped EXE

  • Drops file in System32 directory

  behavioral1behavioral2