Extracted

• • Target
    emotet_e2_602b294e7fd33be701797bf828b0b4bdaaeb1709e54138a8c803d7e2d0dbfb9d_2020-08-11__135837._doc
  • Size 224KB
  • SHA256 602b294e7fd33be701797bf828b0b4bdaaeb1709e54138a8c803d7e2d0dbfb9d
  • MD5 0517539bf364a82edc7130a96d10c81a
  • SHA1 c65c02d20d6d5bbee48bc3f4d218c3f03eabc3a2
  • SHA512 7a54247b779f88b9dd54bd9d9058d816f8c4a804e36e74fb32f595cb6daff751317e2c802402bdf045e2426ee2b2b9aee6bf3a2996bde3a25db8f7f66d8eeb9e
  • MD5 SHA1 SHA512

  Score

  10^/10

  trojanbankeremotet

  • Emotet

    Emotet is a trojan that is primarily spread through spam emails.

    trojanbankeremotet

  • Process spawned unexpected child process

    This typically indicates the parent process was compromised via an exploit or macro.

  • Emotet Payload

    Detects Emotet payload in memory.

  • Blacklisted process makes network request

  • Executes dropped EXE

  • Drops file in System32 directory

  behavioral1behavioral2