emotet | fde698760f42bbf5b4c31ea17a260cdc21919c29fd56545b2207e37790a1ff23 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ewdnMm6QvsaFN4J39RSKF02.dll
Size

660KB
Sample

221102-kzr7haafa6
MD5

fa2a6e55db11cfac9f7e2072d81faa2a
SHA1

cc06a3c78bb9c4ab1f1208ea8509a27ab9ef9344
SHA256

fde698760f42bbf5b4c31ea17a260cdc21919c29fd56545b2207e37790a1ff23
SHA512

87c9484b0d7e2d133f4d012379c33c24e93f1930e77f1bc5e0f75da5757e008b6310299cd5d72dbb107e95dc6feffef12547d7d92608ae988dbf7876ca359b3d
SSDEEP

12288:H6NFi+qz19gtAgY2tiZl4M/aukg78I8v4lSRi4gu2CTRD:aNY19gigZtiZy/ukmQAlQEG

Score

10^/10

emotet banker persistence trojan

Malware Config

Targets

- Target
  
  ewdnMm6QvsaFN4J39RSKF02.dll
- Size
  
  660KB
- MD5
  
  fa2a6e55db11cfac9f7e2072d81faa2a
- SHA1
  
  cc06a3c78bb9c4ab1f1208ea8509a27ab9ef9344
- SHA256
  
  fde698760f42bbf5b4c31ea17a260cdc21919c29fd56545b2207e37790a1ff23
- SHA512
  
  87c9484b0d7e2d133f4d012379c33c24e93f1930e77f1bc5e0f75da5757e008b6310299cd5d72dbb107e95dc6feffef12547d7d92608ae988dbf7876ca359b3d
- SSDEEP
  
  12288:H6NFi+qz19gtAgY2tiZl4M/aukg78I8v4lSRi4gu2CTRD:aNY19gigZtiZy/ukmQAlQEG
Score

10^/10

emotet banker trojan persistence
- Emotet
  Emotet is a trojan that is primarily spread through spam emails.
  trojan banker emotet
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

emotetbankertrojan

behavioral2

emotetbankerpersistencetrojan