Overview

overview

10

Static

static

VirusShare...87.exe

windows7_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    VirusShare_bae06a0ea924a105ef52dfd4cfe79187.exe

  • Size

    112KB

  • Sample

    211019-rpqn9agab4

  • MD5

    bae06a0ea924a105ef52dfd4cfe79187

  • SHA1

    9c091054350a7e14d9d8c76d6bceb3ecdfe26c61

  • SHA256

    3ce0b9ca45ae36be8a3d22ccff44a30207cd179d309b44163f74083826c9e663

  • SHA512

    0a3b050a39918bdce7a1c13dcac923033a9ecf9db5ffd4c744996f1f176936326f141a88932ab1d47a5deb1482dba6f6003f464fd621e831f64980c5e30545fc

Score
10/10
emotetbankertrojan

Malware Config

Targets

    • Target

      VirusShare_bae06a0ea924a105ef52dfd4cfe79187.exe

    • Size

      112KB

    • MD5

      bae06a0ea924a105ef52dfd4cfe79187

    • SHA1

      9c091054350a7e14d9d8c76d6bceb3ecdfe26c61

    • SHA256

      3ce0b9ca45ae36be8a3d22ccff44a30207cd179d309b44163f74083826c9e663

    • SHA512

      0a3b050a39918bdce7a1c13dcac923033a9ecf9db5ffd4c744996f1f176936326f141a88932ab1d47a5deb1482dba6f6003f464fd621e831f64980c5e30545fc

    Score
    10/10
    emotetbankertrojan

    • Emotet

      Emotet is a trojan that is primarily spread through spam emails.

      trojanbankeremotet

    • Emotet Payload

      Detects Emotet payload in memory.

    • Executes dropped EXE

    • Drops file in System32 directory

    behavioral1

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

1
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks