Extracted

• • Target
    emotet_e2_394ec0fa9ca4523489d8bd358a3f11d587009d5b23b32b39585f5cfd26ecfe32_2020-08-11__122807._doc
  • Size 225KB
  • SHA256 394ec0fa9ca4523489d8bd358a3f11d587009d5b23b32b39585f5cfd26ecfe32
  • MD5 aed59ccae9323330bd1f34ba830744dc
  • SHA1 0422df7a7364c225a77e3573b26640e55c60fd55
  • SHA512 d8232f3df2d67719cf40a9b4d327c17aae80f9e3d46c570d4fd9f48cb1e247f47d30bfc4dc90179f2d1748ae31f507d41bd5e1bba842f25a8581af1b4d3c2e43
  • MD5 SHA1 SHA512

  Score

  10^/10

  trojanbankeremotet

  • Emotet

    Emotet is a trojan that is primarily spread through spam emails.

    trojanbankeremotet

  • Process spawned unexpected child process

    This typically indicates the parent process was compromised via an exploit or macro.

  • Emotet Payload

    Detects Emotet payload in memory.

  • Blacklisted process makes network request

  • Executes dropped EXE

  • Drops file in System32 directory

  behavioral1behavioral2