emotet | 01b093f266072f11d3c9605f65fcc56c9fb7643aea36490d3876d0609ee76f8b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

01b093f266072f11d3c9605f65fcc56c9fb7643aea36490d3876d0609ee76f8b
Size

727KB
Sample

221102-1wcweacbc3
MD5

f295c01d8dff075f48c8b9261c839dde
SHA1

15164c01812eb043be91f74e295bf19328d68d35
SHA256

01b093f266072f11d3c9605f65fcc56c9fb7643aea36490d3876d0609ee76f8b
SHA512

a37cffc97b6e166f4756be8e1791499f293107c07772a4e994001f61d11e3d04c8451c02a8891b69f54db985f43bdb8f734cbda809cd9f0d80c9e1035dae2b1c
SSDEEP

12288:ezhsu7PWe6Fth9tmzQS+37pzGIz/mXpo1z+mSjq+DsCJqzfo:ktR6rhjmzhsT/Yg6XjtJqzf

Score

10^/10

emotet banker persistence trojan

Malware Config

Targets

- Target
  
  01b093f266072f11d3c9605f65fcc56c9fb7643aea36490d3876d0609ee76f8b
- Size
  
  727KB
- MD5
  
  f295c01d8dff075f48c8b9261c839dde
- SHA1
  
  15164c01812eb043be91f74e295bf19328d68d35
- SHA256
  
  01b093f266072f11d3c9605f65fcc56c9fb7643aea36490d3876d0609ee76f8b
- SHA512
  
  a37cffc97b6e166f4756be8e1791499f293107c07772a4e994001f61d11e3d04c8451c02a8891b69f54db985f43bdb8f734cbda809cd9f0d80c9e1035dae2b1c
- SSDEEP
  
  12288:ezhsu7PWe6Fth9tmzQS+37pzGIz/mXpo1z+mSjq+DsCJqzfo:ktR6rhjmzhsT/Yg6XjtJqzf
Score

10^/10

emotet banker persistence trojan
- Emotet
  Emotet is a trojan that is primarily spread through spam emails.
  trojan banker emotet
- Adds Run key to start application
  persistence
behavioral1

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

emotetbankerpersistencetrojan