Extracted

• • Target
    emoagain.xls
  • Size 113KB
  • SHA256 7443d5335a207cca176825bd774a412e72882c815206c7f59ace1feb111bb4e9
  • MD5 20759385064298185538fe8560b6dd18
  • SHA1 50ca3dc590956809332b5b878c0ff213d81440a1
  • SHA512 b2fcb139dbdfc68b494c383645b0163b225bc68c0acfbf765e700b862eab27e71f35c892e622f46fbb16406edc512f5ef79e4ef5521b0ac5970ef26fe4ca92f2
  • MD5 SHA1 SHA512

  Score

  10^/10

  emotetbankertrojan

  • Emotet

    Emotet is a trojan that is primarily spread through spam emails.

    trojanbankeremotet

  • Process spawned unexpected child process

    This typically indicates the parent process was compromised via an exploit or macro.

  • Blocklisted process makes network request

  • Downloads MZ/PE file

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2