Extracted

• • Target
    a8bf3641c46be3f0accc6b55370ecf29
  • Size 118KB
  • SHA256 2f80ecbe8f3eb45c354fb36640dc4be6b13064be8550f2d49e41090e5c113b72
  • MD5 a8bf3641c46be3f0accc6b55370ecf29
  • SHA1 2d27136a9386f1344b3a024fdb75bc37d20b4b03
  • SHA512 9246ec52068719072e845bba595e3a296ee46828a19eddda0c9736f149ef666e39a37838e305f1071fd20db522c39c245e7351eb44672ecd1245ead990bc75b5
  • MD5 SHA1 SHA512

  Score

  10^/10

  emotetbankertrojan

  • Emotet

    Emotet is a trojan that is primarily spread through spam emails.

    trojanbankeremotet

  • Process spawned unexpected child process

    This typically indicates the parent process was compromised via an exploit or macro.

  • Blocklisted process makes network request

  • Downloads MZ/PE file

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2