emotet | 578ccbdf302b47fcbe110c62cedf8f101ddd18a935694304a2d4d8e465e02585 | Triage

Sharing

General

Target

578ccbdf302b47fcbe110c62cedf8f101ddd18a935694304a2d4d8e465e02585
Size

664KB
Sample

221102-pahnzscdfr
MD5

2317fdf2275d8e667b30b39b1b699b53
SHA1

7db5a6733b8bef111d856a0e2dac076c72a160c0
SHA256

578ccbdf302b47fcbe110c62cedf8f101ddd18a935694304a2d4d8e465e02585
SHA512

cdf4bad68f8e9e936ae8f10251330fcca2c698309e75431a43effee5b351588050e4acae83bd94ffb40b8990afea6469c5a11e434dcd6b64869a04784480a9bd
SSDEEP

12288:v9D2/XRIK1chzV2rBt5APJlGIw4cDVi8HY1lW+lJk1XY61IU:lD2vRA2rv5APJfw4jiY18+lJkt

Score

10^/10

emotet banker persistence trojan

Malware Config

Targets

- Target
  
  578ccbdf302b47fcbe110c62cedf8f101ddd18a935694304a2d4d8e465e02585
- Size
  
  664KB
- MD5
  
  2317fdf2275d8e667b30b39b1b699b53
- SHA1
  
  7db5a6733b8bef111d856a0e2dac076c72a160c0
- SHA256
  
  578ccbdf302b47fcbe110c62cedf8f101ddd18a935694304a2d4d8e465e02585
- SHA512
  
  cdf4bad68f8e9e936ae8f10251330fcca2c698309e75431a43effee5b351588050e4acae83bd94ffb40b8990afea6469c5a11e434dcd6b64869a04784480a9bd
- SSDEEP
  
  12288:v9D2/XRIK1chzV2rBt5APJlGIw4cDVi8HY1lW+lJk1XY61IU:lD2vRA2rv5APJfw4jiY18+lJkt
Score

10^/10

emotet banker persistence trojan
- Emotet
  Emotet is a trojan that is primarily spread through spam emails.
  trojan banker emotet
- Adds Run key to start application
  persistence
behavioral1

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

emotetbankerpersistencetrojan