Extracted

• • Target
    emotet_e2_8979a7dda1fa732d2164c2ef2e8bb59471cbed0bf320309720b8c18ce4a5f673_2020-08-11__172117._doc
  • Size 225KB
  • SHA256 8979a7dda1fa732d2164c2ef2e8bb59471cbed0bf320309720b8c18ce4a5f673
  • MD5 7c443ccd3c1c0193e1fbc49306fedcbc
  • SHA1 656fcb934a95f5fa0e841d015c8237989f394620
  • SHA512 d1806c499df0b4b4b004a311712a1f5c5ef885e429093d49592b8867c4bb1ac3bfd62a718786013fe2c6a507f031e5d4003b41b78f4a254749756f2f0abff241
  • MD5 SHA1 SHA512

  Score

  10^/10

  trojanbankeremotet

  • Emotet

    Emotet is a trojan that is primarily spread through spam emails.

    trojanbankeremotet

  • Process spawned unexpected child process

    This typically indicates the parent process was compromised via an exploit or macro.

  • Emotet Payload

    Detects Emotet payload in memory.

  • Blacklisted process makes network request

  • Executes dropped EXE

  • Drops file in System32 directory

  behavioral1behavioral2