Extracted

• • Target
    emotet_e2_44bc28fb4f45c5036cbd45a91168a6dbaebe25d1faa6b2d8af02c27735a6db87_2020-08-11__162500._doc
  • Size 226KB
  • SHA256 44bc28fb4f45c5036cbd45a91168a6dbaebe25d1faa6b2d8af02c27735a6db87
  • MD5 ec338a7f7a8b92c80c79d9871dea7988
  • SHA1 e7122387b16bddb33f02fc70e6a3c3baf5f4fbf5
  • SHA512 36c404f1a46a9cad5b1355b07990b758f7db3cb912137252cc47e0c32370d13e0bd3d69100f64e33731a6427062f9a4f3a4015dfea39785a0af05cbec2546c62
  • MD5 SHA1 SHA512

  Score

  10^/10

  trojanbankeremotet

  • Emotet

    Emotet is a trojan that is primarily spread through spam emails.

    trojanbankeremotet

  • Process spawned unexpected child process

    This typically indicates the parent process was compromised via an exploit or macro.

  • Emotet Payload

    Detects Emotet payload in memory.

  • Blacklisted process makes network request

  • Executes dropped EXE

  • Drops file in System32 directory

  behavioral1behavioral2