emotet_exe_e4_8b5e2918ff87247d6f368b5210837d2d2ce99a8518f9ef215053eca90101a4fa_2022-02-24__000214[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
emotet_exe_e4_8b5e2918ff87247d6f368b5210837d2d2ce99a8518f9ef215053eca90101a4fa_2022-02-24__000214.exe
Size 664KB
Sample220224-ab22pachgl
SHA256 8b5e2918ff87247d6f368b5210837d2d2ce99a8518f9ef215053eca90101a4fa
MD5 30d78a968b101bf2f18761656872211f
SHA1 5f6afd1c03857ea70874095b2567ab74372e35bb
SHA512 aa39c5739ee3fcec82f3ec7ff8fd6f6c47cb7676d3d60dd5d3634bba8eaeb208dc422d6133b6f6f11a9a499fb4d844054df2706c5d09592906dccbe54f756bbf
SSDEEP 12288:Z6ZLutvgrwV8RQc5W1yS0ezL9J6XKVe/vyzfANcN/kJhXx5y:qza8RQc5W1P0Q9sXKVLzflBkn
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

emotet_exe_e4_8b5e2918ff87247d6f368b5210837d2d2ce99a8518f9ef215053eca90101a4fa_2022-02-24__000214.exe

.dll 664KB

emotet_exe_e4_8b5e2918ff87247d6f368b5210837d2d2ce99a8518f9ef215053eca90101a4fa_2022-02-24__000214.exe

IMPHASH 5529db874583b5635436baabaebb4b71
SHA256 8b5e2918ff87247d6f368b5210837d2d2ce99a8518f9ef215053eca90101a4fa
MD5 30d78a968b101bf2f18761656872211f
SHA1 5f6afd1c03857ea70874095b2567ab74372e35bb
SHA512 aa39c5739ee3fcec82f3ec7ff8fd6f6c47cb7676d3d60dd5d3634bba8eaeb208dc422d6133b6f6f11a9a499fb4d844054df2706c5d09592906dccbe54f756bbf
SSDEEP 12288:Z6ZLutvgrwV8RQc5W1yS0ezL9J6XKVe/vyzfANcN/kJhXx5y:qza8RQc5W1P0Q9sXKVLzflBkn
MD5 SHA1 SHA512 SSDEEP

regsvr32 windows x86

Minor OS version

Major OS version

Entry point

250287

Magic Number

267

Subsystem

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetFileAttributesA GetFileTime WritePrivateProfileStringA GetCurrentDirectoryA FindResourceExA GetTickCount RtlUnwind HeapAlloc HeapFree HeapReAlloc VirtualAlloc GetSystemInfo VirtualQuery GetSystemTimeAsFileTime GetCommandLineA GetProcessHeap RaiseException SetStdHandle GetFileType ExitThread HeapSize TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetOEMCP HeapDestroy HeapCreate GetStdHandle GetACP GetStringTypeA GetStringTypeW GetTimeZoneInformation SetHandleCount GetStartupInfoA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter GetConsoleCP GetConsoleMode LCMapStringA LCMapStringW WriteConsoleA GetConsoleOutputCP WriteConsoleW SetEnvironmentVariableA GetCPInfo GlobalFlags TlsFree DeleteCriticalSection LocalReAlloc TlsSetValue TlsAlloc InitializeCriticalSection GlobalHandle GlobalReAlloc EnterCriticalSection TlsGetValue LeaveCriticalSection LocalAlloc VirtualProtect FileTimeToLocalFileTime FindNextFileA FileTimeToSystemTime GetCurrentThread ConvertDefaultLocale EnumResourceLanguagesA GetLocaleInfoA CreateEventA SetEvent InterlockedDecrement GetCurrentProcessId GetFullPathNameA FindFirstFileA FindClose DuplicateHandle GetFileSize SetEndOfFile UnlockFile LockFile FlushFileBuffers SetFilePointer WriteFile ReadFile MoveFileA lstrcmpA GetThreadLocale InterlockedIncrement FreeResource GetCurrentThreadId GlobalGetAtomNameA GlobalAddAtomA GlobalFindAtomA GlobalDeleteAtom lstrcmpW GetVersionExA GlobalFree GlobalAlloc GlobalLock GlobalUnlock FormatMessageA LocalFree MulDiv ReadDirectoryChangesW lstrlenA CompareStringW CompareStringA GetVersion MultiByteToWideChar InterlockedExchange GetModuleFileNameA GetVolumeInformationA CreateThread SetThreadPriority GetDriveTypeA GetWindowsDirectoryA GetSystemDirectoryA GetLogicalDriveStringsA GetCurrentProcess GetShortPathNameA OpenProcess ResumeThread SuspendThread GetExitCodeThread TerminateThread SetLastError GetModuleHandleA Sleep CreateProcessA WaitForSingleObject GetLastError ExitProcess FindResourceA LoadResource LockResource SizeofResource CreateFileA CloseHandle DeleteFileA LoadLibraryA GetProcAddress FreeLibrary VirtualFree WideCharToMultiByte

user32

GetNextDlgGroupItem MessageBeep RegisterClipboardFormatA SetParent GetDCEx LockWindowUpdate PostThreadMessageA PostQuitMessage EndPaint BeginPaint GetWindowDC ReleaseDC GetDC ClientToScreen GrayStringA DrawTextExA DrawTextA TabbedTextOutA GetMessageA TranslateMessage ValidateRect DestroyMenu GetWindowThreadProcessId GetDesktopWindow GetActiveWindow CreateDialogIndirectParamA GetNextDlgTabItem EndDialog CharNextA IsWindowEnabled SetWindowTextA IsDialogMessageA SetMenuItemBitmaps GetMenuCheckMarkDimensions EnableMenuItem CheckMenuItem RegisterWindowMessageA SendDlgItemMessageA WinHelpA IsChild GetCapture SetWindowsHookExA CallNextHookEx WindowFromPoint GetClassNameA SetPropA GetPropA RemovePropA GetFocus IsWindow SetFocus GetWindowTextLengthA GetWindowTextA GetForegroundWindow GetLastActivePopup SetActiveWindow DispatchMessageA GetDlgItem GetTopWindow DestroyWindow UnhookWindowsHookEx GetMessageTime GetMessagePos MapWindowPoints TrackPopupMenu GetKeyState SetForegroundWindow GetMenu MessageBoxA GetClassInfoExA GetClassInfoA RegisterClassA AdjustWindowRectEx GetParent EqualRect DeferWindowPos PtInRect EnableWindow SendMessageA CopyRect InflateRect LoadBitmapA GetMenuItemCount GetDlgCtrlID DefWindowProcA CallWindowProcA GetWindowLongA SetWindowLongA SetWindowPos OffsetRect IntersectRect SystemParametersInfoA GetWindowPlacement GetWindow GetMenuState GetMenuStringA UnregisterClassA ReleaseCapture SetCapture InvalidateRgn IsRectEmpty CopyAcceleratorTableA GetSysColorBrush GetAsyncKeyState SetWindowContextHelpId MapDialogRect WaitMessage GetClassLongA SetRectEmpty GetMenuItemID GetSubMenu ModifyMenuA GetClientRect UpdateWindow InvalidateRect RedrawWindow SetTimer KillTimer SetCursor GetSysColor CreateWindowExA ShowWindow CreateWindowExW GetWindowRect ClipCursor SetSystemCursor ShowCursor DrawIcon LoadMenuA IsIconic ScreenToClient IsWindowVisible LoadCursorA LoadIconA GetSystemMetrics FillRect SetRect GetCursorPos LoadCursorFromFileA CopyIcon ExitWindowsEx PeekMessageA PostMessageA CharUpperA MoveWindow

gdi32

SetWindowExtEx ScaleWindowExtEx ExtSelectClipRgn DeleteDC CreatePatternBrush CreateRectRgnIndirect SetRectRgn CombineRgn GetMapMode PatBlt GetCharWidthA StretchDIBits CreateCompatibleBitmap GetRgnBox EnumFontFamiliesExA ScaleViewportExtEx SetViewportExtEx OffsetViewportOrgEx SetViewportOrgEx Escape TextOutA RectVisible PtVisible GetWindowExtEx GetViewportExtEx CreateRectRgn CreateFontA SelectClipRgn IntersectClipRect ExcludeClipRect SetMapMode SetBkMode RestoreDC SaveDC ExtTextOutA GetTextColor GetBkColor CreateBitmap SetBkColor SetTextColor GetClipBox GetDeviceCaps BitBlt SelectObject GetStockObject CreateFontIndirectA DeleteObject CreateSolidBrush StretchBlt Rectangle CreateCompatibleDC GetObjectA

comdlg32

GetFileTitleA

winspool.drv

ClosePrinter OpenPrinterA DocumentPropertiesA

advapi32

RegQueryValueA RegEnumKeyA RegDeleteKeyA RegOpenKeyExA RegQueryValueExA RegOpenKeyA RegCloseKey RegCreateKeyA RegSetValueExA RegDeleteValueA OpenProcessToken LookupPrivilegeValueA AdjustTokenPrivileges RegCreateKeyExA

shell32

SHBrowseForFolderA ShellExecuteA Shell_NotifyIconA SHGetFileInfoA SHGetPathFromIDListA

shlwapi

PathIsUNCA PathFindExtensionA PathStripToRootA PathFindFileNameA

oledlg

ord8

ole32

CLSIDFromProgID CLSIDFromString CoTaskMemFree CoTaskMemAlloc CoGetClassObject StgOpenStorageOnILockBytes StgCreateDocfileOnILockBytes CreateILockBytesOnHGlobal OleUninitialize CoFreeUnusedLibraries OleInitialize CoRevokeClassObject OleIsCurrentClipboard OleFlushClipboard CoRegisterMessageFilter

oleaut32

VariantChangeType SysFreeString SysStringLen SysAllocString SysAllocStringByteLen VariantInit SysAllocStringLen OleCreateFontIndirect VariantCopy SafeArrayDestroy VariantTimeToSystemTime SystemTimeToVariantTime VariantClear

ws2_32

accept select htonl WSAGetLastError WSASetLastError connect sendto recvfrom WSACleanup send socket gethostbyname inet_addr setsockopt htons bind WSAIoctl recv ntohs inet_ntoa closesocket WSAStartup WSAAsyncSelect

psapi

EnumProcessModules EnumProcesses GetModuleFileNameExA