emotet | df060a958391568f192bc8ec45f7a6eb103cd7c06f6a9c6b5c5f8c9bfa397e2c | Triage

Sharing

General

Target

df060a958391568f192bc8ec45f7a6eb103cd7c06f6a9c6b5c5f8c9bfa397e2c
Size

727KB
Sample

221102-3tq2csfder
MD5

e1c1a6357a895b7471e2b718429e46eb
SHA1

dfff40cd1c0125b4414d2a2dbceedb5f20dadabe
SHA256

df060a958391568f192bc8ec45f7a6eb103cd7c06f6a9c6b5c5f8c9bfa397e2c
SHA512

57d54823f9e38effc2dc16c12b556676504308f5b50edff3feb05d0b6cab31d78c45e844e577d4fb6b0fe7d728702b115733e6adf43b6e36212841a1eedba60f
SSDEEP

12288:ezhsu7PWe6Fth9tmzQS+37pzGIz/mXpo1z+mSjq+DsCJqzfo:ktR6rhjmzhsT/Yg6XjtJqzf

Score

10^/10

emotet banker persistence trojan

Malware Config

Targets

- Target
  
  df060a958391568f192bc8ec45f7a6eb103cd7c06f6a9c6b5c5f8c9bfa397e2c
- Size
  
  727KB
- MD5
  
  e1c1a6357a895b7471e2b718429e46eb
- SHA1
  
  dfff40cd1c0125b4414d2a2dbceedb5f20dadabe
- SHA256
  
  df060a958391568f192bc8ec45f7a6eb103cd7c06f6a9c6b5c5f8c9bfa397e2c
- SHA512
  
  57d54823f9e38effc2dc16c12b556676504308f5b50edff3feb05d0b6cab31d78c45e844e577d4fb6b0fe7d728702b115733e6adf43b6e36212841a1eedba60f
- SSDEEP
  
  12288:ezhsu7PWe6Fth9tmzQS+37pzGIz/mXpo1z+mSjq+DsCJqzfo:ktR6rhjmzhsT/Yg6XjtJqzf
Score

10^/10

emotet banker persistence trojan
- Emotet
  Emotet is a trojan that is primarily spread through spam emails.
  trojan banker emotet
- Adds Run key to start application
  persistence
behavioral1

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

emotetbankerpersistencetrojan