Extracted

Extracted

• • Target

    emotet_e2_f81e4de8069e9551180db92af779f1c19f7bfef0dde8f9696ae0b242d3fb8f2d_2020-08-21__171636._doc

  • Size

    178KB

  • MD5

    d42e77a9116b6511efd39d230a7205a3

  • SHA1

    8543820a8562c6d5592a3cef444b75ba35062fae

  • SHA256

    f81e4de8069e9551180db92af779f1c19f7bfef0dde8f9696ae0b242d3fb8f2d

  • SHA512

    ea3e14cbde76d904b9f83db4139fd687a9276a1ee1515fb3099b62dfa7a980c8fe15618a0896df2cccbc895c5548e2f20e5efcb1ce96211d421991f3f54c2f5a

  Score

  10^/10

  trojanbankeremotet

  • Emotet

    Emotet is a trojan that is primarily spread through spam emails.

    trojanbankeremotet

  • Process spawned unexpected child process

    This typically indicates the parent process was compromised via an exploit or macro.

  • Emotet Payload

    Detects Emotet payload in memory.

  • Blacklisted process makes network request

  • Executes dropped EXE

  • Drops file in System32 directory

  behavioral1behavioral2