Extracted

Extracted

Extracted

• • Target

    6b4e80411216eff0629dfc0ce6788afc2578e22f48613a0664edb46f621d746a

  • Size

    49KB

  • MD5

    cd7a6da12697f937963a4364a85aad3d

  • SHA1

    497f9465dc7bc3e7a14d1e7b97ffa74414805eb3

  • SHA256

    6b4e80411216eff0629dfc0ce6788afc2578e22f48613a0664edb46f621d746a

  • SHA512

    9f0652b62aa8a3cb3bd4cb306ec4c76d5f45ff99d7ad901b97c398d569e355c3af61780a8d9a8cc89db326ce8edbb98b129d2b1d1faa3310701a093fa9d6dde8

  Score

  10^/10

  emotetepoch5bankersuricatatrojan

  • Emotet

    Emotet is a trojan that is primarily spread through spam emails.

    trojanbankeremotet

  • Process spawned unexpected child process

    This typically indicates the parent process was compromised via an exploit or macro.

  • suricata: ET MALWARE W32/Emotet CnC Beacon 3

    suricata: ET MALWARE W32/Emotet CnC Beacon 3

    suricata

  • Blocklisted process makes network request

  • Downloads MZ/PE file

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2