Extracted

• • Target
    emotet_e2_94e91a89c274f38ce1057ecb894a643c2c0a2a4eb43cef7bc2a7c6a950f87476_2020-08-11__154124._doc
  • Size 224KB
  • SHA256 94e91a89c274f38ce1057ecb894a643c2c0a2a4eb43cef7bc2a7c6a950f87476
  • MD5 a6915034ccda617b8d139c231f97cc93
  • SHA1 45c911c5d4c230d42a57fac38c6884c748911a7f
  • SHA512 3bc38736b9dfc1e6393ce309c988beabf2515840c7a676ad79f7b53d43f28628c0c6bdc28ebb8ac67fb8086d9356c15cd61ecd31bf80f5d5319ff4f651d1912a
  • MD5 SHA1 SHA512

  Score

  10^/10

  trojanbankeremotet

  • Emotet

    Emotet is a trojan that is primarily spread through spam emails.

    trojanbankeremotet

  • Process spawned unexpected child process

    This typically indicates the parent process was compromised via an exploit or macro.

  • Emotet Payload

    Detects Emotet payload in memory.

  • Blacklisted process makes network request

  • Executes dropped EXE

  • Drops file in System32 directory

  behavioral1behavioral2