emotet_exe_e5_8652092d6a89ebfc12e72c02b96c0250a802c8f1cd2d36451129b4bd4412151e_2022-02-24__000234[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
emotet_exe_e5_8652092d6a89ebfc12e72c02b96c0250a802c8f1cd2d36451129b4bd4412151e_2022-02-24__000234.exe
Size 660KB
Sample220224-ab3cfschgr
SHA256 8652092d6a89ebfc12e72c02b96c0250a802c8f1cd2d36451129b4bd4412151e
MD5 235ffecbbb0c2bc4e97483c551704826
SHA1 4a13e2c5faf43c814cb699360b4965b7a2d1e175
SHA512 cb40632e5bb1524e492103e8e671b408fda89ef2b91b80c6c644bc6b0eeef86a3aa444eee49d08cd397e8918441559bc9121143cdeb01a47b66f5a3f3d9244d4
SSDEEP 12288:hr7tPMgvzJAHX/18nLrOo2HYJnfA/QCwirzKA0BhR3Hm/zZe+sB9qF6+Z2ncwH2:ffdA3/18nLrOoaYNfPPhabS10
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

emotet_exe_e5_8652092d6a89ebfc12e72c02b96c0250a802c8f1cd2d36451129b4bd4412151e_2022-02-24__000234.exe

.dll 660KB

emotet_exe_e5_8652092d6a89ebfc12e72c02b96c0250a802c8f1cd2d36451129b4bd4412151e_2022-02-24__000234.exe

IMPHASH 5529db874583b5635436baabaebb4b71
SHA256 8652092d6a89ebfc12e72c02b96c0250a802c8f1cd2d36451129b4bd4412151e
MD5 235ffecbbb0c2bc4e97483c551704826
SHA1 4a13e2c5faf43c814cb699360b4965b7a2d1e175
SHA512 cb40632e5bb1524e492103e8e671b408fda89ef2b91b80c6c644bc6b0eeef86a3aa444eee49d08cd397e8918441559bc9121143cdeb01a47b66f5a3f3d9244d4
SSDEEP 12288:hr7tPMgvzJAHX/18nLrOo2HYJnfA/QCwirzKA0BhR3Hm/zZe+sB9qF6+Z2ncwH2:ffdA3/18nLrOoaYNfPPhabS10
MD5 SHA1 SHA512 SSDEEP

regsvr32 windows x86

Minor OS version

Major OS version

Entry point

249887

Magic Number

267

Subsystem

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetFileAttributesA GetFileTime WritePrivateProfileStringA GetCurrentDirectoryA FindResourceExA GetTickCount RtlUnwind HeapAlloc HeapFree HeapReAlloc VirtualAlloc GetSystemInfo VirtualQuery GetSystemTimeAsFileTime GetCommandLineA GetProcessHeap RaiseException SetStdHandle GetFileType ExitThread HeapSize TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetOEMCP HeapDestroy HeapCreate GetStdHandle GetACP GetStringTypeA GetStringTypeW GetTimeZoneInformation SetHandleCount GetStartupInfoA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter GetConsoleCP GetConsoleMode LCMapStringA LCMapStringW WriteConsoleA GetConsoleOutputCP WriteConsoleW SetEnvironmentVariableA GetCPInfo GlobalFlags TlsFree DeleteCriticalSection LocalReAlloc TlsSetValue TlsAlloc InitializeCriticalSection GlobalHandle GlobalReAlloc EnterCriticalSection TlsGetValue LeaveCriticalSection LocalAlloc VirtualProtect FileTimeToLocalFileTime FindNextFileA FileTimeToSystemTime GetCurrentThread ConvertDefaultLocale EnumResourceLanguagesA GetLocaleInfoA CreateEventA SetEvent InterlockedDecrement GetCurrentProcessId GetFullPathNameA FindFirstFileA FindClose DuplicateHandle GetFileSize SetEndOfFile UnlockFile LockFile FlushFileBuffers SetFilePointer WriteFile ReadFile MoveFileA lstrcmpA GetThreadLocale InterlockedIncrement FreeResource GetCurrentThreadId GlobalGetAtomNameA GlobalAddAtomA GlobalFindAtomA GlobalDeleteAtom lstrcmpW GetVersionExA GlobalFree GlobalAlloc GlobalLock GlobalUnlock FormatMessageA LocalFree MulDiv ReadDirectoryChangesW lstrlenA CompareStringW CompareStringA GetVersion MultiByteToWideChar InterlockedExchange GetModuleFileNameA GetVolumeInformationA CreateThread SetThreadPriority GetDriveTypeA GetWindowsDirectoryA GetSystemDirectoryA GetLogicalDriveStringsA GetCurrentProcess GetShortPathNameA OpenProcess ResumeThread SuspendThread GetExitCodeThread TerminateThread SetLastError GetModuleHandleA Sleep CreateProcessA WaitForSingleObject GetLastError ExitProcess FindResourceA LoadResource LockResource SizeofResource CreateFileA CloseHandle DeleteFileA LoadLibraryA GetProcAddress FreeLibrary VirtualFree WideCharToMultiByte

user32

GetNextDlgGroupItem MessageBeep RegisterClipboardFormatA SetParent GetDCEx LockWindowUpdate PostThreadMessageA PostQuitMessage EndPaint BeginPaint GetWindowDC ReleaseDC GetDC ClientToScreen GrayStringA DrawTextExA DrawTextA TabbedTextOutA GetMessageA TranslateMessage ValidateRect DestroyMenu GetWindowThreadProcessId GetDesktopWindow GetActiveWindow CreateDialogIndirectParamA GetNextDlgTabItem EndDialog CharNextA IsWindowEnabled SetWindowTextA IsDialogMessageA SetMenuItemBitmaps GetMenuCheckMarkDimensions EnableMenuItem CheckMenuItem RegisterWindowMessageA SendDlgItemMessageA WinHelpA IsChild GetCapture SetWindowsHookExA CallNextHookEx WindowFromPoint GetClassNameA SetPropA GetPropA RemovePropA GetFocus IsWindow SetFocus GetWindowTextLengthA GetWindowTextA GetForegroundWindow GetLastActivePopup SetActiveWindow DispatchMessageA GetDlgItem GetTopWindow DestroyWindow UnhookWindowsHookEx GetMessageTime GetMessagePos MapWindowPoints TrackPopupMenu GetKeyState SetForegroundWindow GetMenu MessageBoxA GetClassInfoExA GetClassInfoA RegisterClassA AdjustWindowRectEx GetParent EqualRect DeferWindowPos PtInRect EnableWindow SendMessageA CopyRect InflateRect LoadBitmapA GetMenuItemCount GetDlgCtrlID DefWindowProcA CallWindowProcA GetWindowLongA SetWindowLongA SetWindowPos OffsetRect IntersectRect SystemParametersInfoA GetWindowPlacement GetWindow GetMenuState GetMenuStringA UnregisterClassA ReleaseCapture SetCapture InvalidateRgn IsRectEmpty CopyAcceleratorTableA GetSysColorBrush GetAsyncKeyState SetWindowContextHelpId MapDialogRect WaitMessage GetClassLongA SetRectEmpty GetMenuItemID GetSubMenu ModifyMenuA GetClientRect UpdateWindow InvalidateRect RedrawWindow SetTimer KillTimer SetCursor GetSysColor CreateWindowExA ShowWindow CreateWindowExW GetWindowRect ClipCursor SetSystemCursor ShowCursor DrawIcon LoadMenuA IsIconic ScreenToClient IsWindowVisible LoadCursorA LoadIconA GetSystemMetrics FillRect SetRect GetCursorPos LoadCursorFromFileA CopyIcon ExitWindowsEx PeekMessageA PostMessageA CharUpperA MoveWindow

gdi32

SetWindowExtEx ScaleWindowExtEx ExtSelectClipRgn DeleteDC CreatePatternBrush CreateRectRgnIndirect SetRectRgn CombineRgn GetMapMode PatBlt GetCharWidthA StretchDIBits CreateCompatibleBitmap GetRgnBox EnumFontFamiliesExA ScaleViewportExtEx SetViewportExtEx OffsetViewportOrgEx SetViewportOrgEx Escape TextOutA RectVisible PtVisible GetWindowExtEx GetViewportExtEx CreateRectRgn CreateFontA SelectClipRgn IntersectClipRect ExcludeClipRect SetMapMode SetBkMode RestoreDC SaveDC ExtTextOutA GetTextColor GetBkColor CreateBitmap SetBkColor SetTextColor GetClipBox GetDeviceCaps BitBlt SelectObject GetStockObject CreateFontIndirectA DeleteObject CreateSolidBrush StretchBlt Rectangle CreateCompatibleDC GetObjectA

comdlg32

GetFileTitleA

winspool.drv

ClosePrinter OpenPrinterA DocumentPropertiesA

advapi32

RegQueryValueA RegEnumKeyA RegDeleteKeyA RegOpenKeyExA RegQueryValueExA RegOpenKeyA RegCloseKey RegCreateKeyA RegSetValueExA RegDeleteValueA OpenProcessToken LookupPrivilegeValueA AdjustTokenPrivileges RegCreateKeyExA

shell32

SHBrowseForFolderA ShellExecuteA Shell_NotifyIconA SHGetFileInfoA SHGetPathFromIDListA

shlwapi

PathIsUNCA PathFindExtensionA PathStripToRootA PathFindFileNameA

oledlg

ord8

ole32

CLSIDFromProgID CLSIDFromString CoTaskMemFree CoTaskMemAlloc CoGetClassObject StgOpenStorageOnILockBytes StgCreateDocfileOnILockBytes CreateILockBytesOnHGlobal OleUninitialize CoFreeUnusedLibraries OleInitialize CoRevokeClassObject OleIsCurrentClipboard OleFlushClipboard CoRegisterMessageFilter

oleaut32

VariantChangeType SysFreeString SysStringLen SysAllocString SysAllocStringByteLen VariantInit SysAllocStringLen OleCreateFontIndirect VariantCopy SafeArrayDestroy VariantTimeToSystemTime SystemTimeToVariantTime VariantClear

ws2_32

accept select htonl WSAGetLastError WSASetLastError connect sendto recvfrom WSACleanup send socket gethostbyname inet_addr setsockopt htons bind WSAIoctl recv ntohs inet_ntoa closesocket WSAStartup WSAAsyncSelect

psapi

EnumProcessModules EnumProcesses GetModuleFileNameExA