General

  • Target
    145a3e1678b2367ac018f0d9e1bd9c73
  • Size 416KB
  • Sample211124-s77adsdagn
  • SHA256 3563c9d1361cb4e8151a46084a33d15d2d9964e58c4df81f905ee2f9c99d082d
  • MD5 SHA1 SHA512

Malware Config

Targets

    • Target
      145a3e1678b2367ac018f0d9e1bd9c73
    • Size 416KB
    • SHA256 3563c9d1361cb4e8151a46084a33d15d2d9964e58c4df81f905ee2f9c99d082d
    • MD5 SHA1 SHA512
    • Emotet

      Emotet is a trojan that is primarily spread through spam emails.

    • suricata: ET MALWARE ABUSE.CH SSL Blacklist Malicious SSL certificate detected (Dridex/Trickbot CnC)

      suricata: ET MALWARE ABUSE.CH SSL Blacklist Malicious SSL certificate detected (Dridex/Trickbot CnC)

    • suricata: ET MALWARE W32/Emotet CnC Beacon 3

      suricata: ET MALWARE W32/Emotet CnC Beacon 3

    • Blocklisted process makes network request

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v6

Tasks