Extracted

• • Target
    emotet_e2_1e9ade92ccd1bfbd58331bb762265e7d5bb40cf74f8d0c743838638d2a27edbe_2020-08-11__113724._doc
  • Size 224KB
  • SHA256 1e9ade92ccd1bfbd58331bb762265e7d5bb40cf74f8d0c743838638d2a27edbe
  • MD5 a10bfce2730435a3c24e5e8ce0c17e34
  • SHA1 0554d41441dcfcaa6d2dc87026099f540904d501
  • SHA512 8bcc1bf6252d40f9edee6517d4a8e3561b43162627a62038a01841cdfcbc464a92f0727afeacfe663e0a69db50e2233a4013d3f2c1954dbe86bfe24e4d20cea5
  • MD5 SHA1 SHA512

  Score

  10^/10

  trojanbankeremotet

  • Emotet

    Emotet is a trojan that is primarily spread through spam emails.

    trojanbankeremotet

  • Process spawned unexpected child process

    This typically indicates the parent process was compromised via an exploit or macro.

  • Emotet Payload

    Detects Emotet payload in memory.

  • Blacklisted process makes network request

  • Executes dropped EXE

  • Drops file in System32 directory

  behavioral1behavioral2