Extracted

Extracted

• • Target

    Address Update, NY.xls

  • Size

    106KB

  • MD5

    a87543e552ee059b2c1a68c26529579b

  • SHA1

    76b384a0f3f314d0b6b26d7ce3a060c2e5a1f424

  • SHA256

    ab01a85308cf2fce06a2402287df4d947b0a89250d30d7289c0b63a07eb00503

  • SHA512

    55f1e968b37c1040782c8b6559a215cde9ba5bad89ebe4d0dbb94b56e6267789e585dc63c0ab369703adca6ab0bfe5ce56acb993a3986fa6392ab826f891a80d

  Score

  10^/10

  emotetepoch4bankersuricatatrojan

  • Emotet

    Emotet is a trojan that is primarily spread through spam emails.

    trojanbankeremotet

  • Process spawned unexpected child process

    This typically indicates the parent process was compromised via an exploit or macro.

  • suricata: ET MALWARE W32/Emotet CnC Beacon 3

    suricata: ET MALWARE W32/Emotet CnC Beacon 3

    suricata

  • Downloads MZ/PE file

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2