Extracted

• • Target

    emotet_e2_274ec03dc6e83bf12177697052207e2413c15948b42bb11df4a4ee110eb84803_2021-01-13__021417891321._doc

  • Size

    157KB

  • MD5

    b29fd46ef5c19e5367757eeb21f04ec8

  • SHA1

    4194d9cdac92eab39810c8f2f9181b3af2651a50

  • SHA256

    274ec03dc6e83bf12177697052207e2413c15948b42bb11df4a4ee110eb84803

  • SHA512

    adae0f470ae57d6205257dd9b1bb5eeed8c1afd3f4d50a17d2e09fe1d99e2b29c3e6ba72c708d60bcb67269478fed7bc1244cca8e39c89658fcca4454e5f6ea2

  Score

  10^/10

  • Process spawned unexpected child process

    This typically indicates the parent process was compromised via an exploit or macro.

  • Blocklisted process makes network request

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2