emotet | 485235dc25b446b953038a416e4a8496e5faded3d65592eb149d13e687720216 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

485235dc25b446b953038a416e4a8496e5faded3d65592eb149d13e687720216
Size

664KB
Sample

221102-nkhlasbdh6
MD5

613b18497d063cdef40727259d14a133
SHA1

508e953a65fb8e20413d8fe21d826a422a7198fa
SHA256

485235dc25b446b953038a416e4a8496e5faded3d65592eb149d13e687720216
SHA512

4eac97529fa53039a9720c16c1f832945bc96c866f5de59ea4e4f0339cdf612ab54c9605b8ce81b28e42ddb40ad42308c1730c755f252880bfc163c5390998b7
SSDEEP

12288:v9D2/XRIK1chzV2rBt5APJlGIP4cDVi8HY1lW+lJk1XY61IU:lD2vRA2rv5APJfP4jiY18+lJkt

Score

10^/10

emotet banker persistence trojan

Malware Config

Targets

- Target
  
  485235dc25b446b953038a416e4a8496e5faded3d65592eb149d13e687720216
- Size
  
  664KB
- MD5
  
  613b18497d063cdef40727259d14a133
- SHA1
  
  508e953a65fb8e20413d8fe21d826a422a7198fa
- SHA256
  
  485235dc25b446b953038a416e4a8496e5faded3d65592eb149d13e687720216
- SHA512
  
  4eac97529fa53039a9720c16c1f832945bc96c866f5de59ea4e4f0339cdf612ab54c9605b8ce81b28e42ddb40ad42308c1730c755f252880bfc163c5390998b7
- SSDEEP
  
  12288:v9D2/XRIK1chzV2rBt5APJlGIP4cDVi8HY1lW+lJk1XY61IU:lD2vRA2rv5APJfP4jiY18+lJkt
Score

10^/10

emotet banker persistence trojan
- Emotet
  Emotet is a trojan that is primarily spread through spam emails.
  trojan banker emotet
- Adds Run key to start application
  persistence
behavioral1

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

emotetbankerpersistencetrojan