Extracted

• • Target
    e0b77c94246a20ec8d2a633c5aa226e2
  • Size 113KB
  • SHA256 c415f6432a14864da8d7cd66dab9263599364b3b1d8b3fd13e4c725d1a0c4562
  • MD5 e0b77c94246a20ec8d2a633c5aa226e2
  • SHA1 3bce907c9316aff89b1fcc9364a639ed9bc6c351
  • SHA512 5bda064cf282d3732ab8482f443392b73b64cb8ef90108cdaf758b2b8bb5507b9c707c721e677d843d351f5bf61f019b924da183032b206f93cea277743287c1
  • MD5 SHA1 SHA512

  Score

  10^/10

  emotetbankersuricatatrojan

  • Emotet

    Emotet is a trojan that is primarily spread through spam emails.

    trojanbankeremotet

  • Process spawned unexpected child process

    This typically indicates the parent process was compromised via an exploit or macro.

  • suricata: ET MALWARE W32/Emotet CnC Beacon 3

    suricata: ET MALWARE W32/Emotet CnC Beacon 3

    suricata

  • Blocklisted process makes network request

  • Downloads MZ/PE file

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2