Extracted

• • Target

    emotet_e2_02a4f728e72a9b3f8acbdfdce4bb3390cdbd32fd2a8ff9d4294afbfeb8ef65e6_2021-01-13__014332501403._doc

  • Size

    158KB

  • MD5

    7050ac30f5bdd67af00c1f714245422d

  • SHA1

    4366fc88789b6316e10929a70ab28baeeed58a3f

  • SHA256

    02a4f728e72a9b3f8acbdfdce4bb3390cdbd32fd2a8ff9d4294afbfeb8ef65e6

  • SHA512

    27d53a20bd294a740025f5466900976f0cc7c22b0d7e8a2f286025e427467e12ff96e52f4530a9896f56ab030ffb2952c6ddb839d3ad6a7552604738987f2083

  Score

  10^/10

  • Process spawned unexpected child process

    This typically indicates the parent process was compromised via an exploit or macro.

  • Blocklisted process makes network request

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1