Extracted

• • Target
    Ace-mexico.xls
  • Size 40KB
  • SHA256 cb1e2bebe4a60f5fc9f44cce7962ed1ade2a297faadf66d1e59a7d0062d1ebfd
  • MD5 8fb6dc44d3a5b1dbf6ce4ee0d166eb24
  • SHA1 4d04a0205d336a984a126f5082cfd6b0576cc85e
  • SHA512 9873a77f1ba373c71a3ce711f6a8782e73cd0ceb4b8d7d03b6d4fdf41f48763868b1e60797cd575a0264c68cc2b4c99880abfc3fae800c5f3dcc53735169b4d6
  • MD5 SHA1 SHA512

  Score

  10^/10

  emotetbankersuricatatrojan

  • Emotet

    Emotet is a trojan that is primarily spread through spam emails.

    trojanbankeremotet

  • Process spawned unexpected child process

    This typically indicates the parent process was compromised via an exploit or macro.

  • suricata: ET MALWARE W32/Emotet CnC Beacon 3

    suricata: ET MALWARE W32/Emotet CnC Beacon 3

    suricata

  • Downloads MZ/PE file

  • Loads dropped DLL

  behavioral1behavioral2