Extracted

• • Target
    SecuriteInfo.com.Exploit.Siggen3.24636.31068.8646
  • Size 113KB
  • SHA256 56112dffd7905d004ceadf7cbfd4f37f6d335e541cacf04836cd11f340a6521f
  • MD5 9e99ef1bbfd8c955808b018b3fb43c99
  • SHA1 9ac4d6294ea2e1f01502433cf004de910ae15238
  • SHA512 a405de1065902125320a30978b9ecf8737417fee1b026310e72acf21605330bae2a388ef7162910210fda8cce79b97c99dfe3d8a38d0c79c104e6e84e65f4ce1
  • MD5 SHA1 SHA512

  Score

  10^/10

  emotetbankersuricatatrojan

  • Emotet

    Emotet is a trojan that is primarily spread through spam emails.

    trojanbankeremotet

  • Process spawned unexpected child process

    This typically indicates the parent process was compromised via an exploit or macro.

  • suricata: ET MALWARE W32/Emotet CnC Beacon 3

    suricata: ET MALWARE W32/Emotet CnC Beacon 3

    suricata

  • Blocklisted process makes network request

  • Downloads MZ/PE file

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2