Extracted

• • Target
    SecuriteInfo.com.Heur.24407.21788
  • Size 113KB
  • SHA256 14242004bc97b6ca2b2b40e09b270a056e3d87aa4b37251f79709b26eeec3a5c
  • MD5 b41cd587a370f7eb5d69a0402266a6f7
  • SHA1 ddba5d5a0ee4d101a60c166a47694e0b95089485
  • SHA512 0f4a52ee8b5dd0fa7bec09c48e3643e71350154f7fc79d3d0c29f3b4a860e77415ad5ef4d3df0367e70b56aafa814021c0688bcb1827efa70f5cf94e819118f3
  • MD5 SHA1 SHA512

  Score

  10^/10

  emotetbankersuricatatrojan

  • Emotet

    Emotet is a trojan that is primarily spread through spam emails.

    trojanbankeremotet

  • Process spawned unexpected child process

    This typically indicates the parent process was compromised via an exploit or macro.

  • suricata: ET MALWARE W32/Emotet CnC Beacon 3

    suricata: ET MALWARE W32/Emotet CnC Beacon 3

    suricata

  • Blocklisted process makes network request

  • Downloads MZ/PE file

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2