Extracted

Extracted

• • Target
    b2285fdea3f9372a2668ff43cc3169f0
  • Size 128KB
  • SHA256 60bfb92cf2f86b683b04d1917c4eccb0529dd8c401d77e0aeef0793e82f78717
  • MD5 b2285fdea3f9372a2668ff43cc3169f0
  • SHA1 93121ec68c8c9cb70d6be1b610d50afa46a78d4e
  • SHA512 4d18673b2f1d9fc1a62d3b0267bbcecc21dc63de633881d2bca6552aa70c20b817b4cfeaee7040da03b33171cfcf167cf22f50c28f9c007cf382dc143ea9cd2b
  • MD5 SHA1 SHA512

  Score

  10^/10

  emotetbankersuricatatrojan

  • Emotet

    Emotet is a trojan that is primarily spread through spam emails.

    trojanbankeremotet

  • Process spawned unexpected child process

    This typically indicates the parent process was compromised via an exploit or macro.

  • suricata: ET MALWARE W32/Emotet CnC Beacon 3

    suricata: ET MALWARE W32/Emotet CnC Beacon 3

    suricata

  • Blocklisted process makes network request

  • Downloads MZ/PE file

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2