Extracted

Extracted

• • Target

    0020958254075417.xlsm

  • Size

    99KB

  • MD5

    6311cf1dfd643eae70734988186fa432

  • SHA1

    110d3d271d605f46d98868dd0efde7186106f347

  • SHA256

    117b236d9375b514dff681f1ee10d3c3f49f8ed5646e3fd1001440614dc80788

  • SHA512

    f185f37fc1b0d8f0075f86ef4f77bed752090abc3b8d2fe24f83d36da819582b73398bebb7ae7f1eddae9855a8f9c17528f88c75ec807d5ae88a9165e67c4813

  Score

  10^/10

  emotetepoch5bankertrojan

  • Emotet

    Emotet is a trojan that is primarily spread through spam emails.

    trojanbankeremotet

  • Process spawned unexpected child process

    This typically indicates the parent process was compromised via an exploit or macro.

  • Blocklisted process makes network request

  • Downloads MZ/PE file

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2