Extracted

• • Target
    41eee17439144fc78b1bdcb1939d2625
  • Size 118KB
  • SHA256 44375fae220fa8f7a7b515b8e1e77037fc8138819eb2be2ea5fe090907169db7
  • MD5 41eee17439144fc78b1bdcb1939d2625
  • SHA1 44207ac5e12d72a62bc440115c9a6ef6498f6778
  • SHA512 a1a1a842b8282a800e695e2e2e15bcefe5c0d75ce2d024787996ddade7636412a754b6c3b8e53f5a137313fbc9b88756a736e485cc4d9d376e909258bd36d477
  • MD5 SHA1 SHA512

  Score

  10^/10

  emotetbankersuricatatrojan

  • Emotet

    Emotet is a trojan that is primarily spread through spam emails.

    trojanbankeremotet

  • Process spawned unexpected child process

    This typically indicates the parent process was compromised via an exploit or macro.

  • suricata: ET MALWARE W32/Emotet CnC Beacon 3

    suricata: ET MALWARE W32/Emotet CnC Beacon 3

    suricata

  • Blocklisted process makes network request

  • Downloads MZ/PE file

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2