emotet | bd68a0a8bbfca976be058d9c40a982bace5b1e70348f1d893541ba92291883c0 | Triage

Sharing

General

Target

bd68a0a8bbfca976be058d9c40a982bace5b1e70348f1d893541ba92291883c0
Size

629KB
Sample

221102-1x42aaefel
MD5

53476acafbf70965fb1e6b7fc0125529
SHA1

7c21f34c0fefad0c96d357f21eda509051422870
SHA256

bd68a0a8bbfca976be058d9c40a982bace5b1e70348f1d893541ba92291883c0
SHA512

995f79ab65471935054d430ddf67d2d150db5f021ebb08b9fa5641dc778fc3aa4071d141baf1a5ab06179316f82bd4be7f0a9248c81956151138ed96d624bd18
SSDEEP

12288:6tGis7p49VmD3OjG7QbBtL95WhNye5JHKVu6cig1Doa:6tGis1T3OjueLqhd5NKAD3

Score

10^/10

emotet banker persistence trojan

Malware Config

Targets

- Target
  
  bd68a0a8bbfca976be058d9c40a982bace5b1e70348f1d893541ba92291883c0
- Size
  
  629KB
- MD5
  
  53476acafbf70965fb1e6b7fc0125529
- SHA1
  
  7c21f34c0fefad0c96d357f21eda509051422870
- SHA256
  
  bd68a0a8bbfca976be058d9c40a982bace5b1e70348f1d893541ba92291883c0
- SHA512
  
  995f79ab65471935054d430ddf67d2d150db5f021ebb08b9fa5641dc778fc3aa4071d141baf1a5ab06179316f82bd4be7f0a9248c81956151138ed96d624bd18
- SSDEEP
  
  12288:6tGis7p49VmD3OjG7QbBtL95WhNye5JHKVu6cig1Doa:6tGis1T3OjueLqhd5NKAD3
Score

10^/10

emotet banker persistence trojan
- Emotet
  Emotet is a trojan that is primarily spread through spam emails.
  trojan banker emotet
- Adds Run key to start application
  persistence
behavioral1

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

emotetbankerpersistencetrojan