Extracted

Extracted

Extracted

• • Target

    5fc2151bdd72d6e042fa1ef2cca0e353859c48634ffa97a00a546a701939c78b

  • Size

    114KB

  • MD5

    4c3308f1a880faa8e9ce0ab02358d527

  • SHA1

    9cca6556b86ab4986ff47d795b5e23cadaa21280

  • SHA256

    5fc2151bdd72d6e042fa1ef2cca0e353859c48634ffa97a00a546a701939c78b

  • SHA512

    f0fac46d46ee87b5df8a9b28f32ddfb0d242a6709fa259c54734258be31684c5f48536ae07fa39bea004cced6fbb2da5ad4a7965e282a9de9b2821e25f27d095

  Score

  10^/10

  emotetepoch5bankersuricatatrojan

  • Emotet

    Emotet is a trojan that is primarily spread through spam emails.

    trojanbankeremotet

  • Process spawned unexpected child process

    This typically indicates the parent process was compromised via an exploit or macro.

  • suricata: ET MALWARE W32/Emotet CnC Beacon 3

    suricata: ET MALWARE W32/Emotet CnC Beacon 3

    suricata

  • Blocklisted process makes network request

  • Downloads MZ/PE file

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2