Extracted

• • Target

    emotet_e2_21b5c730d1a2cf87f14e0e687f6ade375e751a5705d59995b7b373756ef20e93_2021-01-12__230834629586._doc

  • Size

    157KB

  • MD5

    b10fd43e4c3e6e317e9a3bf55d5594fc

  • SHA1

    2e4c6e1481537d93fd7c46ea84b51d7c61171f2e

  • SHA256

    21b5c730d1a2cf87f14e0e687f6ade375e751a5705d59995b7b373756ef20e93

  • SHA512

    977e48abd7686402a00d8c84567c3b70947442857b497ba0df2f00bab10863d7913038b4bf2559602a68e60ae780e403351735c45853d87680a3b7957b57c857

  Score

  10^/10

  • Process spawned unexpected child process

    This typically indicates the parent process was compromised via an exploit or macro.

  • Blocklisted process makes network request

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2