Extracted

• • Target
    emotet_e2_8bfd3587537db9be73cc189509eab9796c40a95566b79753724b36ce7dce7c19_2020-08-11__150557._doc
  • Size 225KB
  • SHA256 8bfd3587537db9be73cc189509eab9796c40a95566b79753724b36ce7dce7c19
  • MD5 b4acc74f9b529b0dab9fe390c5bbdc74
  • SHA1 96e3060c8bfcb28a6916a90d8152927f99f95587
  • SHA512 8d8c7d5f99907103754cb5a57c3c87be6109a4ee66bafb688a17fb12c9f9e9afd1189f137c8e81f10c3c68767d132d7820e9d86727c1ad7525f3467497e427c6
  • MD5 SHA1 SHA512

  Score

  10^/10

  trojanbankeremotet

  • Emotet

    Emotet is a trojan that is primarily spread through spam emails.

    trojanbankeremotet

  • Process spawned unexpected child process

    This typically indicates the parent process was compromised via an exploit or macro.

  • Emotet Payload

    Detects Emotet payload in memory.

  • Blacklisted process makes network request

  • Executes dropped EXE

  • Drops file in System32 directory

  behavioral1behavioral2