Extracted

• • Target
    b4b963f8b1b93344fbe3f4aca8a626a4
  • Size 113KB
  • SHA256 93f2d3c86229e3bcb68a7d438023c3d13faab8d441501184deae4191276d2901
  • MD5 b4b963f8b1b93344fbe3f4aca8a626a4
  • SHA1 4d33f79e2e8b1abdbce423412077c7b5452ececa
  • SHA512 e2f9616ed830fe19f8cb43bf22a4c88a1d9295d0fdfc8b33cb8b8f09b43cabf61839f5e58ef8c00bf910ab3172c8212b1722bb674b7f34bef9f930f23dc474eb
  • MD5 SHA1 SHA512

  Score

  10^/10

  emotetbankersuricatatrojan

  • Emotet

    Emotet is a trojan that is primarily spread through spam emails.

    trojanbankeremotet

  • Process spawned unexpected child process

    This typically indicates the parent process was compromised via an exploit or macro.

  • suricata: ET MALWARE W32/Emotet CnC Beacon 3

    suricata: ET MALWARE W32/Emotet CnC Beacon 3

    suricata

  • Blocklisted process makes network request

  • Downloads MZ/PE file

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2