Extracted

• • Target

    2d8078458561a6fcfce9c3921c79bc93

  • Size

    113KB

  • MD5

    2d8078458561a6fcfce9c3921c79bc93

  • SHA1

    6a54ecb2288e38f79ede46898c374308e5810b13

  • SHA256

    d041eb4d27665d30fa516a31242774fa89c5e50f30253637454ca9d6db135dfb

  • SHA512

    1e166ac645c5ff25e6501965a2d411f910d73d2c9910a86524ea5cea723b954fba525c812f5456553fbf88344ffe7d50639e156375787e9b585d3a44da99d825

  Score

  10^/10

  emotetbankertrojan

  • Emotet

    Emotet is a trojan that is primarily spread through spam emails.

    trojanbankeremotet

  • Process spawned unexpected child process

    This typically indicates the parent process was compromised via an exploit or macro.

  • Blocklisted process makes network request

  • Downloads MZ/PE file

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2