Extracted

• • Target
    emotet_e2_d760943bc37af2bcfc28d0e4f2a9de09a531cf8eb96220ea588ab5373d0b5dda_2020-08-11__152309._doc
  • Size 226KB
  • SHA256 d760943bc37af2bcfc28d0e4f2a9de09a531cf8eb96220ea588ab5373d0b5dda
  • MD5 3356286f5a60a801fd9201fc4a03957c
  • SHA1 0a00552b7f7921a0dc730b92bad07e9a286915df
  • SHA512 9e9610673058f3748adda752bbad12e351d2cc91e3c69fe14f3e786ac8493fb53a86ea3b3ad723f56938bbbd7ef40b391aeca7227d275cf4c74fc7541ad14fa8
  • MD5 SHA1 SHA512

  Score

  10^/10

  trojanbankeremotet

  • Emotet

    Emotet is a trojan that is primarily spread through spam emails.

    trojanbankeremotet

  • Process spawned unexpected child process

    This typically indicates the parent process was compromised via an exploit or macro.

  • Emotet Payload

    Detects Emotet payload in memory.

  • Blacklisted process makes network request

  • Executes dropped EXE

  • Drops file in System32 directory

  behavioral1behavioral2