General
- Target emotet_e1_c609c073a27725317f5ce95c17ca9a5cf5ffbf493c092fe49ca92a3f3f9e2694_2020-10-16__081937071866._doc
- Size 211KB
- Sample201016-v7xsddt2ss
- SHA256 c609c073a27725317f5ce95c17ca9a5cf5ffbf493c092fe49ca92a3f3f9e2694
- MD5 03f684ce7e62ae223850e92101924be8
- SHA1 7e87b42e10e0e033f8004cc00fbc82789e933adb
- SHA512 825ae144f23ff959056fe978181cca86b78347f66c9e637f3c74d5bc9b568585535c2a8006cfc613132bc1093dd90efeeca04fd1fedb51ac50d4bc1972b3476c
- MD5 SHA1 SHA512
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
emotet_e1_c609c073a27725317f5ce95c17ca9a5cf5ffbf493c092fe49ca92a3f3f9e2694_2020-10-16__081937071866._doc.doc
Resource
win7v200722
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
emotet_e1_c609c073a27725317f5ce95c17ca9a5cf5ffbf493c092fe49ca92a3f3f9e2694_2020-10-16__081937071866._doc.doc
Resource
win10v200722
0 signatures
0 seconds
Malware Config
Targets
-
- Target emotet_e1_c609c073a27725317f5ce95c17ca9a5cf5ffbf493c092fe49ca92a3f3f9e2694_2020-10-16__081937071866._doc
- Size 211KB
- SHA256 c609c073a27725317f5ce95c17ca9a5cf5ffbf493c092fe49ca92a3f3f9e2694
- MD5 03f684ce7e62ae223850e92101924be8
- SHA1 7e87b42e10e0e033f8004cc00fbc82789e933adb
- SHA512 825ae144f23ff959056fe978181cca86b78347f66c9e637f3c74d5bc9b568585535c2a8006cfc613132bc1093dd90efeeca04fd1fedb51ac50d4bc1972b3476c
- MD5 SHA1 SHA512
Score10/10-
Process spawned unexpected child process
This typically indicates the parent process was compromised via an exploit or macro.
-
Blacklisted process makes network request
-
Drops file in System32 directory