emotet | 5e98d40c06df7bd85769fc23ca3bd605ab1715dfab7774dd0392384ae4b00fc8 | Triage

Sharing

General

Target

5e98d40c06df7bd85769fc23ca3bd605ab1715dfab7774dd0392384ae4b00fc8
Size

629KB
Sample

221102-3jhbgafchq
MD5

1597484bdcb3984c51c19efa1686be94
SHA1

db2e747288d2d1aafc00d4afab394e32f9d8087f
SHA256

5e98d40c06df7bd85769fc23ca3bd605ab1715dfab7774dd0392384ae4b00fc8
SHA512

20f6879ebc95b007f9a8b8f4f55752f7173285a43faab023f770d4c42f92f582b6a04dd75657ff26522b25973efe100168016d9bea5d329b79bbbbab8761d547
SSDEEP

12288:6tGis7p49VmD3OjG7QbBtLD5WhNye5JHKVu6cig1Doa:6tGis1T3OjueLUhd5NKAD3

Score

10^/10

emotet banker persistence trojan

Malware Config

Targets

- Target
  
  5e98d40c06df7bd85769fc23ca3bd605ab1715dfab7774dd0392384ae4b00fc8
- Size
  
  629KB
- MD5
  
  1597484bdcb3984c51c19efa1686be94
- SHA1
  
  db2e747288d2d1aafc00d4afab394e32f9d8087f
- SHA256
  
  5e98d40c06df7bd85769fc23ca3bd605ab1715dfab7774dd0392384ae4b00fc8
- SHA512
  
  20f6879ebc95b007f9a8b8f4f55752f7173285a43faab023f770d4c42f92f582b6a04dd75657ff26522b25973efe100168016d9bea5d329b79bbbbab8761d547
- SSDEEP
  
  12288:6tGis7p49VmD3OjG7QbBtLD5WhNye5JHKVu6cig1Doa:6tGis1T3OjueLUhd5NKAD3
Score

10^/10

emotet banker persistence trojan
- Emotet
  Emotet is a trojan that is primarily spread through spam emails.
  trojan banker emotet
- Adds Run key to start application
  persistence
behavioral1

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

emotetbankerpersistencetrojan