emotet | da7cec5b6d476238e3568383bbba449303dcc5e0279643ada781386ca9290130 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

da7cec5b6d476238e3568383bbba449303dcc5e0279643ada781386ca9290130
Size

664KB
Sample

221102-lxcvgabfaq
MD5

0cf50841ee5f32637fd95b7014923476
SHA1

524a8262fcbe1d35be740eee3a5f973f6fe2f9d0
SHA256

da7cec5b6d476238e3568383bbba449303dcc5e0279643ada781386ca9290130
SHA512

c161f8284620400e43e9cc2b78ca5b52834a1f2551b9f928dafdf8e6448a2e55293553494567f9b12889ab02b9cc75eeee2114bdc50cb0cd2e3288a50c35bcc3
SSDEEP

12288:v9D2/XRIK1chzV2rBt5APJlGIc4cDVi8HY1lW+lJk1XY61IU:lD2vRA2rv5APJfc4jiY18+lJkt

Score

10^/10

emotet banker persistence trojan

Malware Config

Targets

- Target
  
  da7cec5b6d476238e3568383bbba449303dcc5e0279643ada781386ca9290130
- Size
  
  664KB
- MD5
  
  0cf50841ee5f32637fd95b7014923476
- SHA1
  
  524a8262fcbe1d35be740eee3a5f973f6fe2f9d0
- SHA256
  
  da7cec5b6d476238e3568383bbba449303dcc5e0279643ada781386ca9290130
- SHA512
  
  c161f8284620400e43e9cc2b78ca5b52834a1f2551b9f928dafdf8e6448a2e55293553494567f9b12889ab02b9cc75eeee2114bdc50cb0cd2e3288a50c35bcc3
- SSDEEP
  
  12288:v9D2/XRIK1chzV2rBt5APJlGIc4cDVi8HY1lW+lJk1XY61IU:lD2vRA2rv5APJfc4jiY18+lJkt
Score

10^/10

emotet banker persistence trojan
- Emotet
  Emotet is a trojan that is primarily spread through spam emails.
  trojan banker emotet
- Adds Run key to start application
  persistence
behavioral1

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

emotetbankerpersistencetrojan