Extracted

• • Target
    emotet_e1_a260420dc5be1222922aff55612c7de95fa5a309575098f10604dfd43014e888_2020-10-29__212904056586._doc
  • Size 291KB
  • SHA256 a260420dc5be1222922aff55612c7de95fa5a309575098f10604dfd43014e888
  • MD5 9b3c4d3f7130e2671db702bd10c715d0
  • SHA1 7054e142830581ef448e694062947d9be84bbe22
  • SHA512 95122ab95c818e1a13680b5405b5b338243e4ad3cb0a5bc145bec369203438a905f0f76fd07487720662e9662ba859c6a3c9ee6633f5022e1331dcb663f59096
  • MD5 SHA1 SHA512

  Score

  10^/10

  • Process spawned unexpected child process

    This typically indicates the parent process was compromised via an exploit or macro.

  • Blacklisted process makes network request

  • Drops file in System32 directory

  behavioral1behavioral2