Extracted

• • Target

    emotet_e2_8510370235baa3ba052e4110ae5571a7f1215dc584e1ef954934737a71a87b8b_2021-01-13__020408330227._doc

  • Size

    156KB

  • MD5

    701c14de15bd1098ff260f8c88b7e856

  • SHA1

    4b633308cd2edfeb2982303b59627da6b8ecf9bf

  • SHA256

    8510370235baa3ba052e4110ae5571a7f1215dc584e1ef954934737a71a87b8b

  • SHA512

    8f657b9d1738976e01b2d1b042c3c3c2051bafc13c50dcf909135e5437de085a65f9fb99605e3b8b7136a2c8bc4b170368918c48472b16a574dac628b3dbd4fd

  Score

  10^/10

  • Process spawned unexpected child process

    This typically indicates the parent process was compromised via an exploit or macro.

  • Blocklisted process makes network request

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1