Extracted

• • Target
    emotet_e1_f452ebbb6a749f0cd58dd03de749ef6a2158119219902efa67d5f025461e96f3_2020-10-29__192642983679._doc
  • Size 291KB
  • SHA256 f452ebbb6a749f0cd58dd03de749ef6a2158119219902efa67d5f025461e96f3
  • MD5 f7a059a7f841db61391648966cd39970
  • SHA1 846233a4c893916613dc75649d350c08fbc5f033
  • SHA512 60aff3f0f9179362a097ac3ff268884827c9e3c61db5ac25b124d05d61341674951edf2677b3b980137b61891a28f9cfbefe1fa8d50e282687f3fc80dc8d1038
  • MD5 SHA1 SHA512

  Score

  10^/10

  • Process spawned unexpected child process

    This typically indicates the parent process was compromised via an exploit or macro.

  • Blacklisted process makes network request

  • Drops file in System32 directory

  behavioral1behavioral2