Extracted

• • Target
    5c1e943fd50beef2e697528c8e0da3c8
  • Size 118KB
  • SHA256 361e7457bfd87680419fd11b82e2c11ba668205e8421b38cfcb7e879e5267dda
  • MD5 5c1e943fd50beef2e697528c8e0da3c8
  • SHA1 289a4b9c7796a8b3f06d6520a3e9532139e37426
  • SHA512 5d3954504d566ce2ac645546f212ab553e8e67dd0446139e8bd5b6f5a03f6d5ef2c0393c681b4579e84498f5d24e24966a7709df34858b09594f1b2e5e569bee
  • MD5 SHA1 SHA512

  Score

  10^/10

  emotetbankersuricatatrojan

  • Emotet

    Emotet is a trojan that is primarily spread through spam emails.

    trojanbankeremotet

  • Process spawned unexpected child process

    This typically indicates the parent process was compromised via an exploit or macro.

  • suricata: ET MALWARE W32/Emotet CnC Beacon 3

    suricata: ET MALWARE W32/Emotet CnC Beacon 3

    suricata

  • Blocklisted process makes network request

  • Downloads MZ/PE file

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2