emotet | 746259766b48c4cf74458c4392e519654a10de10d369cb9becf93978f7ba10f0 | Triage

Sharing

General

Target

746259766b48c4cf74458c4392e519654a10de10d369cb9becf93978f7ba10f0
Size

664KB
Sample

221102-negf2sbde5
MD5

b6d7982a97286ca7edb386de6a40b8f4
SHA1

52dc7aebe40963e8d8fdb5ecf228a4ea545e2b07
SHA256

746259766b48c4cf74458c4392e519654a10de10d369cb9becf93978f7ba10f0
SHA512

29c3ad818c352d8d2a816fd6ca441fc48e347f522d9a961b5c63c3d043e8339acf0707997d383734081730b154f19c77f91dae2312af8908f94b5cf98cb59c7f
SSDEEP

12288:v9D2/XRIK1chzV2rBt5APJlGIq4cDVi8HY1lW+lJk1XY61IU:lD2vRA2rv5APJfq4jiY18+lJkt

Score

10^/10

emotet banker persistence trojan

Malware Config

Targets

- Target
  
  746259766b48c4cf74458c4392e519654a10de10d369cb9becf93978f7ba10f0
- Size
  
  664KB
- MD5
  
  b6d7982a97286ca7edb386de6a40b8f4
- SHA1
  
  52dc7aebe40963e8d8fdb5ecf228a4ea545e2b07
- SHA256
  
  746259766b48c4cf74458c4392e519654a10de10d369cb9becf93978f7ba10f0
- SHA512
  
  29c3ad818c352d8d2a816fd6ca441fc48e347f522d9a961b5c63c3d043e8339acf0707997d383734081730b154f19c77f91dae2312af8908f94b5cf98cb59c7f
- SSDEEP
  
  12288:v9D2/XRIK1chzV2rBt5APJlGIq4cDVi8HY1lW+lJk1XY61IU:lD2vRA2rv5APJfq4jiY18+lJkt
Score

10^/10

emotet banker persistence trojan
- Emotet
  Emotet is a trojan that is primarily spread through spam emails.
  trojan banker emotet
- Adds Run key to start application
  persistence
behavioral1

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

emotetbankerpersistencetrojan