Overview

overview

10

Static

static

572364a36a...54.exe

windows7-x64

10

572364a36a...54.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    572364a36ab856bf456d4bbe0c1e2727690bb7806a3311087e79e573cdb56854

  • Size

    113KB

  • Sample

    220725-ayevnsffhp

  • MD5

    7611776a4693c2b77957cc213036345d

  • SHA1

    6e176c3f6db12a08674633252085bd96eac3de17

  • SHA256

    572364a36ab856bf456d4bbe0c1e2727690bb7806a3311087e79e573cdb56854

  • SHA512

    61deddbb3444e48fec1b2dc3d87b3c3a2e7d566050e7be64670d3cda12e93b4373d59603755c59c7d77e7f3ea692396a0d55fca5b8d21f0498c9d84215b1248e

Score
10/10
emotetbankersuricatatrojan

Malware Config

Targets

    • Target

      572364a36ab856bf456d4bbe0c1e2727690bb7806a3311087e79e573cdb56854

    • Size

      113KB

    • MD5

      7611776a4693c2b77957cc213036345d

    • SHA1

      6e176c3f6db12a08674633252085bd96eac3de17

    • SHA256

      572364a36ab856bf456d4bbe0c1e2727690bb7806a3311087e79e573cdb56854

    • SHA512

      61deddbb3444e48fec1b2dc3d87b3c3a2e7d566050e7be64670d3cda12e93b4373d59603755c59c7d77e7f3ea692396a0d55fca5b8d21f0498c9d84215b1248e

    Score
    10/10
    emotetbankersuricatatrojan

    • Emotet

      Emotet is a trojan that is primarily spread through spam emails.

      trojanbankeremotet

    • suricata: ET MALWARE Win32/Emotet CnC Checkin (POST)

      suricata: ET MALWARE Win32/Emotet CnC Checkin (POST)

      suricata

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

1
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks