General

  • Target
    8f6552b136a4dd8719c898f90df1ba44
  • Size 416KB
  • Sample211124-s3l4nadaer
  • SHA256 03995882170eb6ebacaa47f77fc0c2e8fd78e17ab5427fbe3c70b2f91f46e44d
  • MD5 SHA1 SHA512

Malware Config

Targets

    • Target
      8f6552b136a4dd8719c898f90df1ba44
    • Size 416KB
    • SHA256 03995882170eb6ebacaa47f77fc0c2e8fd78e17ab5427fbe3c70b2f91f46e44d
    • MD5 SHA1 SHA512
    • Emotet

      Emotet is a trojan that is primarily spread through spam emails.

    • suricata: ET MALWARE ABUSE.CH SSL Blacklist Malicious SSL certificate detected (Dridex/Trickbot CnC)

      suricata: ET MALWARE ABUSE.CH SSL Blacklist Malicious SSL certificate detected (Dridex/Trickbot CnC)

    • suricata: ET MALWARE W32/Emotet CnC Beacon 3

      suricata: ET MALWARE W32/Emotet CnC Beacon 3

    • Blocklisted process makes network request

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v6

Tasks