emotet | a25157f686cfce09013798a272c14097fa2ddb0ef1d1a5b2fc77c00d7dfc41cb | Triage

Sharing

General

Target

a25157f686cfce09013798a272c14097fa2ddb0ef1d1a5b2fc77c00d7dfc41cb
Size

629KB
Sample

221102-2zv2tsfben
MD5

c9c69f06d8578c13ba70f7ab1f793da7
SHA1

d9b3f7517277c896c8733f79f26c3dc7091ad58f
SHA256

a25157f686cfce09013798a272c14097fa2ddb0ef1d1a5b2fc77c00d7dfc41cb
SHA512

1ba2b828b31d0fd712343fac529f5d82ff4cfce1dffd47ea52c3b58db2e5db28f090f3a597600d255d27127c51232be9999c6a8f38e96d44356a1e510fe8f9d0
SSDEEP

12288:6tGis7p49VmD3OjG7QbBtLu5WhNye5JHKVu6cig1Doa:6tGis1T3OjueLhhd5NKAD3

Score

10^/10

emotet banker persistence trojan

Malware Config

Targets

- Target
  
  a25157f686cfce09013798a272c14097fa2ddb0ef1d1a5b2fc77c00d7dfc41cb
- Size
  
  629KB
- MD5
  
  c9c69f06d8578c13ba70f7ab1f793da7
- SHA1
  
  d9b3f7517277c896c8733f79f26c3dc7091ad58f
- SHA256
  
  a25157f686cfce09013798a272c14097fa2ddb0ef1d1a5b2fc77c00d7dfc41cb
- SHA512
  
  1ba2b828b31d0fd712343fac529f5d82ff4cfce1dffd47ea52c3b58db2e5db28f090f3a597600d255d27127c51232be9999c6a8f38e96d44356a1e510fe8f9d0
- SSDEEP
  
  12288:6tGis7p49VmD3OjG7QbBtLu5WhNye5JHKVu6cig1Doa:6tGis1T3OjueLhhd5NKAD3
Score

10^/10

emotet banker persistence trojan
- Emotet
  Emotet is a trojan that is primarily spread through spam emails.
  trojan banker emotet
- Adds Run key to start application
  persistence
behavioral1

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

emotetbankerpersistencetrojan