Extracted

• • Target
    3e80be99851045f56907f7be441df09a
  • Size 118KB
  • SHA256 6ca8434af5324f89ebada8515f317f603ebf9218a71c5d778d8a1dd2f279100b
  • MD5 3e80be99851045f56907f7be441df09a
  • SHA1 7839d42d779f293a23e7dc88af8e3fde8eccebca
  • SHA512 2690f9a4ad38c86cf009ba9175853f44583d85af67469300b160a732167ead98fba865db641fc11a45755df44ffc315af9db01d26a5561e20c3893e7c33b1ed2
  • MD5 SHA1 SHA512

  Score

  10^/10

  emotetbankersuricatatrojan

  • Emotet

    Emotet is a trojan that is primarily spread through spam emails.

    trojanbankeremotet

  • Process spawned unexpected child process

    This typically indicates the parent process was compromised via an exploit or macro.

  • suricata: ET MALWARE W32/Emotet CnC Beacon 3

    suricata: ET MALWARE W32/Emotet CnC Beacon 3

    suricata

  • Blocklisted process makes network request

  • Downloads MZ/PE file

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2