Extracted

• • Target
    913636833f9374397ae740960fba067e
  • Size 113KB
  • SHA256 fee63d184b4f72c5fdc678d786214be5361b7f6a2daa4be6d6947cc99b6ea9dd
  • MD5 913636833f9374397ae740960fba067e
  • SHA1 37366d37028bf8786e3968557ee06f22b975fd86
  • SHA512 73f7cc2a034dfe479822ebf7043f5c84c5439fe44f843a430632dd7ff91c3c2de582ef68b50dfa1e0a74aca91d9d9d268480c214091fc61eb69753a8c4cc1a30
  • MD5 SHA1 SHA512

  Score

  10^/10

  emotetbankersuricatatrojan

  • Emotet

    Emotet is a trojan that is primarily spread through spam emails.

    trojanbankeremotet

  • Process spawned unexpected child process

    This typically indicates the parent process was compromised via an exploit or macro.

  • suricata: ET MALWARE W32/Emotet CnC Beacon 3

    suricata: ET MALWARE W32/Emotet CnC Beacon 3

    suricata

  • Blocklisted process makes network request

  • Downloads MZ/PE file

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2