emotet | 3626164792a17548d9d34630330342f45f22dc445351d9320abacacd74e0f18c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3626164792a17548d9d34630330342f45f22dc445351d9320abacacd74e0f18c
Size

727KB
Sample

221102-1zgc1aefgn
MD5

61bfa4e240c4468de18a2e0c638ffcae
SHA1

54c12574b52d70a0edbee0b27fb0f1aaa6e6734a
SHA256

3626164792a17548d9d34630330342f45f22dc445351d9320abacacd74e0f18c
SHA512

c192f2b26d8703fc95260f41e7fe85e183eccdea135d8cab13b946f8423c73bde2bf884e684058e5615ae1e392ca51305ee59fd40064b4fc31bfd7438e1ccf4c
SSDEEP

12288:ezhsu7PWe6Fth9tmzQS+37pzGIz/mXpo1z++Sjq+DsCJqzfo:ktR6rhjmzhsT/Yg6fjtJqzf

Score

10^/10

emotet banker persistence trojan

Malware Config

Targets

- Target
  
  3626164792a17548d9d34630330342f45f22dc445351d9320abacacd74e0f18c
- Size
  
  727KB
- MD5
  
  61bfa4e240c4468de18a2e0c638ffcae
- SHA1
  
  54c12574b52d70a0edbee0b27fb0f1aaa6e6734a
- SHA256
  
  3626164792a17548d9d34630330342f45f22dc445351d9320abacacd74e0f18c
- SHA512
  
  c192f2b26d8703fc95260f41e7fe85e183eccdea135d8cab13b946f8423c73bde2bf884e684058e5615ae1e392ca51305ee59fd40064b4fc31bfd7438e1ccf4c
- SSDEEP
  
  12288:ezhsu7PWe6Fth9tmzQS+37pzGIz/mXpo1z++Sjq+DsCJqzfo:ktR6rhjmzhsT/Yg6fjtJqzf
Score

10^/10

emotet banker persistence trojan
- Emotet
  Emotet is a trojan that is primarily spread through spam emails.
  trojan banker emotet
- Adds Run key to start application
  persistence
behavioral1

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

emotetbankerpersistencetrojan