Extracted

• • Target

    emotet_e2_1a1b034fdcb26fe1fcb333e1affa2ee31562e911adb3799d067c6b3f5e1b3aa2_2021-01-12__200336209344._doc

  • Size

    158KB

  • MD5

    5c9527092cbd5cfb3439407352943d9d

  • SHA1

    806352c52bdae00eaa88040de97a78420e5254b1

  • SHA256

    1a1b034fdcb26fe1fcb333e1affa2ee31562e911adb3799d067c6b3f5e1b3aa2

  • SHA512

    acc4dcd231bbb98e315174db723de490b648a0afc9b5f4165077ac7957500121bd4507c4f827fa8ebdc4883e4cb66362def30aa94f865aaa8ef0313f5cef398c

  Score

  10^/10

  • Process spawned unexpected child process

    This typically indicates the parent process was compromised via an exploit or macro.

  • Blocklisted process makes network request

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1