Extracted

• • Target
    emotet_e1_f7f73b1df964eaa08268266ba33451fee8b0403f5815941ce56c1dd5e96f8a25_2020-10-29__192644988581._doc
  • Size 290KB
  • SHA256 f7f73b1df964eaa08268266ba33451fee8b0403f5815941ce56c1dd5e96f8a25
  • MD5 8ba0c446b66b5c58be64d6af8b418895
  • SHA1 e007580f0304ac49934bb418dd47ad4c791dc941
  • SHA512 bcbf54db0aed6ef71463fbe0d65ba9477903fa7f7e9abb7e892fb9f6efe13400571a378063633cead6e9a7d053fcfe0ed000910fae77575dad404d1e446df270
  • MD5 SHA1 SHA512

  Score

  10^/10

  • Process spawned unexpected child process

    This typically indicates the parent process was compromised via an exploit or macro.

  • Blacklisted process makes network request

  • Drops file in System32 directory

  behavioral1behavioral2