emotet | 14b634565bb9237babcb4b9fcdf5e36e196c49656b96ae458afef132249633d8 | Triage

Sharing

General

Target

14b634565bb9237babcb4b9fcdf5e36e196c49656b96ae458afef132249633d8
Size

660KB
Sample

221102-kke9dsbccm
MD5

75f523b305728e59c29de2c44476f91f
SHA1

24a5c5bb911e2553885eacdaf857bc33ca67c47d
SHA256

14b634565bb9237babcb4b9fcdf5e36e196c49656b96ae458afef132249633d8
SHA512

9aee48d48ee2390b55e9ef603bd63137eace52941b11021199b757762ba9edfe8328d87137627ee5eb3df7a78989ed7a6de39ac811986c1b97666c6d95a3a40a
SSDEEP

12288:H6NFi+qz19gtAgY2tiZl4h/aukg78I8v4lSRi4gu2CTRD:aNY19gigZtiZyEukmQAlQEG

Score

10^/10

emotet banker persistence trojan

Malware Config

Targets

- Target
  
  14b634565bb9237babcb4b9fcdf5e36e196c49656b96ae458afef132249633d8
- Size
  
  660KB
- MD5
  
  75f523b305728e59c29de2c44476f91f
- SHA1
  
  24a5c5bb911e2553885eacdaf857bc33ca67c47d
- SHA256
  
  14b634565bb9237babcb4b9fcdf5e36e196c49656b96ae458afef132249633d8
- SHA512
  
  9aee48d48ee2390b55e9ef603bd63137eace52941b11021199b757762ba9edfe8328d87137627ee5eb3df7a78989ed7a6de39ac811986c1b97666c6d95a3a40a
- SSDEEP
  
  12288:H6NFi+qz19gtAgY2tiZl4h/aukg78I8v4lSRi4gu2CTRD:aNY19gigZtiZyEukmQAlQEG
Score

10^/10

emotet banker persistence trojan
- Emotet
  Emotet is a trojan that is primarily spread through spam emails.
  trojan banker emotet
- Adds Run key to start application
  persistence
behavioral1

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

emotetbankerpersistencetrojan