Extracted

Extracted

Extracted

• • Target

    aca67468ced86d88c980d851092607e06405b3109230404fb7c51c6c916f389b

  • Size

    114KB

  • MD5

    4962c644e09bb0011788f7b2fe368e40

  • SHA1

    13465cd4f8d94af607145cb65eb901a71a33437d

  • SHA256

    aca67468ced86d88c980d851092607e06405b3109230404fb7c51c6c916f389b

  • SHA512

    320c40058c983b6b9be51635f467779a7445c40ce69c3be890f27e61d2364912fc8ecd46224703ad9165b83607df5ad8e4e488da0346e57d9d85213cb0e78541

  Score

  10^/10

  emotetepoch5bankersuricatatrojan

  • Emotet

    Emotet is a trojan that is primarily spread through spam emails.

    trojanbankeremotet

  • Process spawned unexpected child process

    This typically indicates the parent process was compromised via an exploit or macro.

  • suricata: ET MALWARE W32/Emotet CnC Beacon 3

    suricata: ET MALWARE W32/Emotet CnC Beacon 3

    suricata

  • Blocklisted process makes network request

  • Downloads MZ/PE file

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2