emotet | 5dcb4f91ede40fdfb59a881681bc44b2d1bb43a8f84edf70b64d199bccf09ee4 | Triage

Sharing

General

Target

5dcb4f91ede40fdfb59a881681bc44b2d1bb43a8f84edf70b64d199bccf09ee4
Size

664KB
Sample

221102-n5kldscdcr
MD5

604315d9742f380cd475d3226d33957f
SHA1

fa27d33ce5b467e2fcfce85713b0f9aec6a5bf0d
SHA256

5dcb4f91ede40fdfb59a881681bc44b2d1bb43a8f84edf70b64d199bccf09ee4
SHA512

3182e68c36244d74d85d4064b71cb0d1bab4247bdfe8d3e7445527fee3aa9497aa0d5b2df491193fd73565ff41358d64f469333eaf35dd0514b54575b96d022e
SSDEEP

12288:v9D2/XRIK1chzV2rBt5APJlGIP4cDVi8HY1lW+lJk1XY61IU:lD2vRA2rv5APJfP4jiY18+lJkt

Score

10^/10

emotet banker persistence trojan

Malware Config

Targets

- Target
  
  5dcb4f91ede40fdfb59a881681bc44b2d1bb43a8f84edf70b64d199bccf09ee4
- Size
  
  664KB
- MD5
  
  604315d9742f380cd475d3226d33957f
- SHA1
  
  fa27d33ce5b467e2fcfce85713b0f9aec6a5bf0d
- SHA256
  
  5dcb4f91ede40fdfb59a881681bc44b2d1bb43a8f84edf70b64d199bccf09ee4
- SHA512
  
  3182e68c36244d74d85d4064b71cb0d1bab4247bdfe8d3e7445527fee3aa9497aa0d5b2df491193fd73565ff41358d64f469333eaf35dd0514b54575b96d022e
- SSDEEP
  
  12288:v9D2/XRIK1chzV2rBt5APJlGIP4cDVi8HY1lW+lJk1XY61IU:lD2vRA2rv5APJfP4jiY18+lJkt
Score

10^/10

emotet banker persistence trojan
- Emotet
  Emotet is a trojan that is primarily spread through spam emails.
  trojan banker emotet
- Adds Run key to start application
  persistence
behavioral1

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

emotetbankerpersistencetrojan