Extracted

• • Target
    emotet_e2_2cd6d3c756477ef451f511c6ffae2ae49542fb6a4114f11be3b86cf4bdf57404_2020-08-11__100549._doc
  • Size 225KB
  • SHA256 2cd6d3c756477ef451f511c6ffae2ae49542fb6a4114f11be3b86cf4bdf57404
  • MD5 2c9df1e8ac421f1965530681cf8c6a33
  • SHA1 a65ddf264d498a716db6525b472bf7b1fd15097f
  • SHA512 ba819debbcd9c02e97e9d19ff32baa08a2c00eb84f2e26e1bd3112b785d105edc11884c842ee10d406d7f99c6a8c829c12824d42386955fe7fc2229dfcce5c47
  • MD5 SHA1 SHA512

  Score

  10^/10

  trojanbankeremotet

  • Emotet

    Emotet is a trojan that is primarily spread through spam emails.

    trojanbankeremotet

  • Process spawned unexpected child process

    This typically indicates the parent process was compromised via an exploit or macro.

  • Emotet Payload

    Detects Emotet payload in memory.

  • Blacklisted process makes network request

  • Executes dropped EXE

  • Drops file in System32 directory

  behavioral1behavioral2