Extracted

• • Target
    6fd5c84001462a92330a0c3d26db2088
  • Size 113KB
  • SHA256 6bbe67b5f91f49ff1cce69808d819d7a6f44672bc88d38f1abbf1c2fe582d3b4
  • MD5 6fd5c84001462a92330a0c3d26db2088
  • SHA1 7c0d0a80e7ebb3af7ce549df78a5a68cbd5debb5
  • SHA512 281f861f095873125f03e180498c2de6d2282d5222f13d527a14174c521963e3e52131e79c8be4fb4f0e2e10d1c991a750ea08eb863ec38e202124531d1f5826
  • MD5 SHA1 SHA512

  Score

  10^/10

  emotetbankersuricatatrojan

  • Emotet

    Emotet is a trojan that is primarily spread through spam emails.

    trojanbankeremotet

  • Process spawned unexpected child process

    This typically indicates the parent process was compromised via an exploit or macro.

  • suricata: ET MALWARE W32/Emotet CnC Beacon 3

    suricata: ET MALWARE W32/Emotet CnC Beacon 3

    suricata

  • Blocklisted process makes network request

  • Downloads MZ/PE file

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2