emotet | c12fece388528c624f8db0c5034c44911d267f42a6623c3b8b47538611a3f455 | Triage

Sharing

General

Target

c12fece388528c624f8db0c5034c44911d267f42a6623c3b8b47538611a3f455
Size

727KB
Sample

221102-22m41aceh5
MD5

9c5a7e8837c2bb5e98de2e954e184ed8
SHA1

e340f869f4a8121427b73fb52821e17ce6038015
SHA256

c12fece388528c624f8db0c5034c44911d267f42a6623c3b8b47538611a3f455
SHA512

70a85ae4e17a56047cbd89ad60670ac248d5b4779eb57850811c9ba36dd11f516a4174280af59bde6298c012d4fb30b42da31896af2b4e60264dcb8036b4fb9c
SSDEEP

12288:ezhsu7PWe6Fth9tmzQS+37pzGIz/mXpo1z+SSjq+DsCJqzfo:ktR6rhjmzhsT/Yg6LjtJqzf

Score

10^/10

emotet banker persistence trojan

Malware Config

Targets

- Target
  
  c12fece388528c624f8db0c5034c44911d267f42a6623c3b8b47538611a3f455
- Size
  
  727KB
- MD5
  
  9c5a7e8837c2bb5e98de2e954e184ed8
- SHA1
  
  e340f869f4a8121427b73fb52821e17ce6038015
- SHA256
  
  c12fece388528c624f8db0c5034c44911d267f42a6623c3b8b47538611a3f455
- SHA512
  
  70a85ae4e17a56047cbd89ad60670ac248d5b4779eb57850811c9ba36dd11f516a4174280af59bde6298c012d4fb30b42da31896af2b4e60264dcb8036b4fb9c
- SSDEEP
  
  12288:ezhsu7PWe6Fth9tmzQS+37pzGIz/mXpo1z+SSjq+DsCJqzfo:ktR6rhjmzhsT/Yg6LjtJqzf
Score

10^/10

emotet banker persistence trojan
- Emotet
  Emotet is a trojan that is primarily spread through spam emails.
  trojan banker emotet
- Adds Run key to start application
  persistence
behavioral1

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

emotetbankerpersistencetrojan