Extracted

• • Target
    1b65d20cdf25ceebefbb478343160ed8
  • Size 113KB
  • SHA256 c5850b16a368ab7c8f2d03cebcc7dd51173a704cdd1d6c105ba43083a40b6063
  • MD5 1b65d20cdf25ceebefbb478343160ed8
  • SHA1 6b23cd052471a569d437b9d6d86b0130dc7ef91a
  • SHA512 0ca82821bb0349fc8a05aadf7ad9a27add2a60ba31a10f3af82981cb3e85ef5cb2395005cda99b88171ef7fb804070d7052f3d5a3694245b119d0d2232059b10
  • MD5 SHA1 SHA512

  Score

  10^/10

  emotetbankersuricatatrojan

  • Emotet

    Emotet is a trojan that is primarily spread through spam emails.

    trojanbankeremotet

  • Process spawned unexpected child process

    This typically indicates the parent process was compromised via an exploit or macro.

  • suricata: ET MALWARE W32/Emotet CnC Beacon 3

    suricata: ET MALWARE W32/Emotet CnC Beacon 3

    suricata

  • Blocklisted process makes network request

  • Downloads MZ/PE file

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2