emotet | 0e9204698f30c8c5c1b4b9d2d162faafc305a8f96ea0a31a875609676c38ee38 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0e9204698f30c8c5c1b4b9d2d162faafc305a8f96ea0a31a875609676c38ee38
Size

727KB
Sample

221102-2tqj6acec6
MD5

dedbac5e564f16e0fa4c1394a442d94a
SHA1

e6978f82a1c946ecb4c4272d1ddf6beee7fa4323
SHA256

0e9204698f30c8c5c1b4b9d2d162faafc305a8f96ea0a31a875609676c38ee38
SHA512

355656988a0680bd9e1f22c15ae94a2cd5364ceca6cb2ebb424624d99084f829aa1ef44dd4b8d135a4213a554fc1c5db997b201e0c788793748dc6bcbac6bcd8
SSDEEP

12288:ezhsu7PWe6Fth9tmzQS+37pzGIz/mXpo1z+cSjq+DsCJqzfo:ktR6rhjmzhsT/Yg65jtJqzf

Score

10^/10

emotet banker persistence trojan

Malware Config

Targets

- Target
  
  0e9204698f30c8c5c1b4b9d2d162faafc305a8f96ea0a31a875609676c38ee38
- Size
  
  727KB
- MD5
  
  dedbac5e564f16e0fa4c1394a442d94a
- SHA1
  
  e6978f82a1c946ecb4c4272d1ddf6beee7fa4323
- SHA256
  
  0e9204698f30c8c5c1b4b9d2d162faafc305a8f96ea0a31a875609676c38ee38
- SHA512
  
  355656988a0680bd9e1f22c15ae94a2cd5364ceca6cb2ebb424624d99084f829aa1ef44dd4b8d135a4213a554fc1c5db997b201e0c788793748dc6bcbac6bcd8
- SSDEEP
  
  12288:ezhsu7PWe6Fth9tmzQS+37pzGIz/mXpo1z+cSjq+DsCJqzfo:ktR6rhjmzhsT/Yg65jtJqzf
Score

10^/10

emotet banker persistence trojan
- Emotet
  Emotet is a trojan that is primarily spread through spam emails.
  trojan banker emotet
- Adds Run key to start application
  persistence
behavioral1

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

emotetbankerpersistencetrojan