emotet_exe_e4_c370b05d1a1c25abc0b824fd500a83f7df6d8e3d660ec1a965fc51e4e8a61154_2022-02-24__000212[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
emotet_exe_e4_c370b05d1a1c25abc0b824fd500a83f7df6d8e3d660ec1a965fc51e4e8a61154_2022-02-24__000212.exe
Size 664KB
Sample220224-ab3cfschgm
SHA256 c370b05d1a1c25abc0b824fd500a83f7df6d8e3d660ec1a965fc51e4e8a61154
MD5 79f07ed597ca127fd335d3a9e4604c6d
SHA1 d9d5e5bc98984864fe94df93c1062dfe33356822
SHA512 803f85ae43f8a2260bf2ad3a239a3b2770c9302fc03873e74488746221968d17b399ad68ce34a5203bdeed70b8b9f6acb3671b9b8b6dab378a6e307890acb637
SSDEEP 12288:Z6ZLutvgrwV8RQc5W1yS0ezL9J6XKJe/vyzfANcN/kJhXx5y:qza8RQc5W1P0Q9sXKJLzflBkn
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

emotet_exe_e4_c370b05d1a1c25abc0b824fd500a83f7df6d8e3d660ec1a965fc51e4e8a61154_2022-02-24__000212.exe

.dll 664KB

emotet_exe_e4_c370b05d1a1c25abc0b824fd500a83f7df6d8e3d660ec1a965fc51e4e8a61154_2022-02-24__000212.exe

IMPHASH 5529db874583b5635436baabaebb4b71
SHA256 c370b05d1a1c25abc0b824fd500a83f7df6d8e3d660ec1a965fc51e4e8a61154
MD5 79f07ed597ca127fd335d3a9e4604c6d
SHA1 d9d5e5bc98984864fe94df93c1062dfe33356822
SHA512 803f85ae43f8a2260bf2ad3a239a3b2770c9302fc03873e74488746221968d17b399ad68ce34a5203bdeed70b8b9f6acb3671b9b8b6dab378a6e307890acb637
SSDEEP 12288:Z6ZLutvgrwV8RQc5W1yS0ezL9J6XKJe/vyzfANcN/kJhXx5y:qza8RQc5W1P0Q9sXKJLzflBkn
MD5 SHA1 SHA512 SSDEEP

regsvr32 windows x86

Minor OS version

Major OS version

Entry point

250287

Magic Number

267

Subsystem

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetFileAttributesA GetFileTime WritePrivateProfileStringA GetCurrentDirectoryA FindResourceExA GetTickCount RtlUnwind HeapAlloc HeapFree HeapReAlloc VirtualAlloc GetSystemInfo VirtualQuery GetSystemTimeAsFileTime GetCommandLineA GetProcessHeap RaiseException SetStdHandle GetFileType ExitThread HeapSize TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetOEMCP HeapDestroy HeapCreate GetStdHandle GetACP GetStringTypeA GetStringTypeW GetTimeZoneInformation SetHandleCount GetStartupInfoA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter GetConsoleCP GetConsoleMode LCMapStringA LCMapStringW WriteConsoleA GetConsoleOutputCP WriteConsoleW SetEnvironmentVariableA GetCPInfo GlobalFlags TlsFree DeleteCriticalSection LocalReAlloc TlsSetValue TlsAlloc InitializeCriticalSection GlobalHandle GlobalReAlloc EnterCriticalSection TlsGetValue LeaveCriticalSection LocalAlloc VirtualProtect FileTimeToLocalFileTime FindNextFileA FileTimeToSystemTime GetCurrentThread ConvertDefaultLocale EnumResourceLanguagesA GetLocaleInfoA CreateEventA SetEvent InterlockedDecrement GetCurrentProcessId GetFullPathNameA FindFirstFileA FindClose DuplicateHandle GetFileSize SetEndOfFile UnlockFile LockFile FlushFileBuffers SetFilePointer WriteFile ReadFile MoveFileA lstrcmpA GetThreadLocale InterlockedIncrement FreeResource GetCurrentThreadId GlobalGetAtomNameA GlobalAddAtomA GlobalFindAtomA GlobalDeleteAtom lstrcmpW GetVersionExA GlobalFree GlobalAlloc GlobalLock GlobalUnlock FormatMessageA LocalFree MulDiv ReadDirectoryChangesW lstrlenA CompareStringW CompareStringA GetVersion MultiByteToWideChar InterlockedExchange GetModuleFileNameA GetVolumeInformationA CreateThread SetThreadPriority GetDriveTypeA GetWindowsDirectoryA GetSystemDirectoryA GetLogicalDriveStringsA GetCurrentProcess GetShortPathNameA OpenProcess ResumeThread SuspendThread GetExitCodeThread TerminateThread SetLastError GetModuleHandleA Sleep CreateProcessA WaitForSingleObject GetLastError ExitProcess FindResourceA LoadResource LockResource SizeofResource CreateFileA CloseHandle DeleteFileA LoadLibraryA GetProcAddress FreeLibrary VirtualFree WideCharToMultiByte

user32

GetNextDlgGroupItem MessageBeep RegisterClipboardFormatA SetParent GetDCEx LockWindowUpdate PostThreadMessageA PostQuitMessage EndPaint BeginPaint GetWindowDC ReleaseDC GetDC ClientToScreen GrayStringA DrawTextExA DrawTextA TabbedTextOutA GetMessageA TranslateMessage ValidateRect DestroyMenu GetWindowThreadProcessId GetDesktopWindow GetActiveWindow CreateDialogIndirectParamA GetNextDlgTabItem EndDialog CharNextA IsWindowEnabled SetWindowTextA IsDialogMessageA SetMenuItemBitmaps GetMenuCheckMarkDimensions EnableMenuItem CheckMenuItem RegisterWindowMessageA SendDlgItemMessageA WinHelpA IsChild GetCapture SetWindowsHookExA CallNextHookEx WindowFromPoint GetClassNameA SetPropA GetPropA RemovePropA GetFocus IsWindow SetFocus GetWindowTextLengthA GetWindowTextA GetForegroundWindow GetLastActivePopup SetActiveWindow DispatchMessageA GetDlgItem GetTopWindow DestroyWindow UnhookWindowsHookEx GetMessageTime GetMessagePos MapWindowPoints TrackPopupMenu GetKeyState SetForegroundWindow GetMenu MessageBoxA GetClassInfoExA GetClassInfoA RegisterClassA AdjustWindowRectEx GetParent EqualRect DeferWindowPos PtInRect EnableWindow SendMessageA CopyRect InflateRect LoadBitmapA GetMenuItemCount GetDlgCtrlID DefWindowProcA CallWindowProcA GetWindowLongA SetWindowLongA SetWindowPos OffsetRect IntersectRect SystemParametersInfoA GetWindowPlacement GetWindow GetMenuState GetMenuStringA UnregisterClassA ReleaseCapture SetCapture InvalidateRgn IsRectEmpty CopyAcceleratorTableA GetSysColorBrush GetAsyncKeyState SetWindowContextHelpId MapDialogRect WaitMessage GetClassLongA SetRectEmpty GetMenuItemID GetSubMenu ModifyMenuA GetClientRect UpdateWindow InvalidateRect RedrawWindow SetTimer KillTimer SetCursor GetSysColor CreateWindowExA ShowWindow CreateWindowExW GetWindowRect ClipCursor SetSystemCursor ShowCursor DrawIcon LoadMenuA IsIconic ScreenToClient IsWindowVisible LoadCursorA LoadIconA GetSystemMetrics FillRect SetRect GetCursorPos LoadCursorFromFileA CopyIcon ExitWindowsEx PeekMessageA PostMessageA CharUpperA MoveWindow

gdi32

SetWindowExtEx ScaleWindowExtEx ExtSelectClipRgn DeleteDC CreatePatternBrush CreateRectRgnIndirect SetRectRgn CombineRgn GetMapMode PatBlt GetCharWidthA StretchDIBits CreateCompatibleBitmap GetRgnBox EnumFontFamiliesExA ScaleViewportExtEx SetViewportExtEx OffsetViewportOrgEx SetViewportOrgEx Escape TextOutA RectVisible PtVisible GetWindowExtEx GetViewportExtEx CreateRectRgn CreateFontA SelectClipRgn IntersectClipRect ExcludeClipRect SetMapMode SetBkMode RestoreDC SaveDC ExtTextOutA GetTextColor GetBkColor CreateBitmap SetBkColor SetTextColor GetClipBox GetDeviceCaps BitBlt SelectObject GetStockObject CreateFontIndirectA DeleteObject CreateSolidBrush StretchBlt Rectangle CreateCompatibleDC GetObjectA

comdlg32

GetFileTitleA

winspool.drv

ClosePrinter OpenPrinterA DocumentPropertiesA

advapi32

RegQueryValueA RegEnumKeyA RegDeleteKeyA RegOpenKeyExA RegQueryValueExA RegOpenKeyA RegCloseKey RegCreateKeyA RegSetValueExA RegDeleteValueA OpenProcessToken LookupPrivilegeValueA AdjustTokenPrivileges RegCreateKeyExA

shell32

SHBrowseForFolderA ShellExecuteA Shell_NotifyIconA SHGetFileInfoA SHGetPathFromIDListA

shlwapi

PathIsUNCA PathFindExtensionA PathStripToRootA PathFindFileNameA

oledlg

ord8

ole32

CLSIDFromProgID CLSIDFromString CoTaskMemFree CoTaskMemAlloc CoGetClassObject StgOpenStorageOnILockBytes StgCreateDocfileOnILockBytes CreateILockBytesOnHGlobal OleUninitialize CoFreeUnusedLibraries OleInitialize CoRevokeClassObject OleIsCurrentClipboard OleFlushClipboard CoRegisterMessageFilter

oleaut32

VariantChangeType SysFreeString SysStringLen SysAllocString SysAllocStringByteLen VariantInit SysAllocStringLen OleCreateFontIndirect VariantCopy SafeArrayDestroy VariantTimeToSystemTime SystemTimeToVariantTime VariantClear

ws2_32

accept select htonl WSAGetLastError WSASetLastError connect sendto recvfrom WSACleanup send socket gethostbyname inet_addr setsockopt htons bind WSAIoctl recv ntohs inet_ntoa closesocket WSAStartup WSAAsyncSelect

psapi

EnumProcessModules EnumProcesses GetModuleFileNameExA