Extracted

• • Target
    emotet_e2_2cf1f43470ff33536fabf3c1c6bfb82ea01ca6802e217e3723d642e86a185bf6_2020-08-11__132026._doc
  • Size 225KB
  • SHA256 2cf1f43470ff33536fabf3c1c6bfb82ea01ca6802e217e3723d642e86a185bf6
  • MD5 06fb44d13967421a0ec132a15ea04909
  • SHA1 928c8f9a6b073b456135069f3691fa9ef266c178
  • SHA512 ad7867f9aedd1b75f52d44812240754cfa049591210f832eca08b9fd4cf7ea20ecdaccf1291333a3a00a90249127012c353fdfd93ddcd6d3f1c043cf7b824b97
  • MD5 SHA1 SHA512

  Score

  10^/10

  trojanbankeremotet

  • Emotet

    Emotet is a trojan that is primarily spread through spam emails.

    trojanbankeremotet

  • Process spawned unexpected child process

    This typically indicates the parent process was compromised via an exploit or macro.

  • Emotet Payload

    Detects Emotet payload in memory.

  • Blacklisted process makes network request

  • Executes dropped EXE

  • Drops file in System32 directory

  behavioral1behavioral2