emotet | 3caed9344a5d30a1db49913c8074d15c9e53f6a17058ec9d7154a2591816e632 | Triage

Sharing

General

Target

3caed9344a5d30a1db49913c8074d15c9e53f6a17058ec9d7154a2591816e632
Size

629KB
Sample

221102-t8lwhscghm
MD5

f92f5c77dc1a963cc4a62a433d8182d1
SHA1

1f986807ba8893e5225bd565914e3fc5e3c134dc
SHA256

3caed9344a5d30a1db49913c8074d15c9e53f6a17058ec9d7154a2591816e632
SHA512

da89b23e0d03e028318687070f5a74f2231f33c281aff010809d39f937024297cc3989bc4ac9f4415362e36dcb92b24f8abf9998465858321bbfced651488ff9
SSDEEP

12288:6tGis7p49VmD3OjG7QbBtLz5WhNye5JHKVu6cig1Doa:6tGis1T3OjueLEhd5NKAD3

Score

10^/10

emotet banker persistence trojan

Malware Config

Targets

- Target
  
  3caed9344a5d30a1db49913c8074d15c9e53f6a17058ec9d7154a2591816e632
- Size
  
  629KB
- MD5
  
  f92f5c77dc1a963cc4a62a433d8182d1
- SHA1
  
  1f986807ba8893e5225bd565914e3fc5e3c134dc
- SHA256
  
  3caed9344a5d30a1db49913c8074d15c9e53f6a17058ec9d7154a2591816e632
- SHA512
  
  da89b23e0d03e028318687070f5a74f2231f33c281aff010809d39f937024297cc3989bc4ac9f4415362e36dcb92b24f8abf9998465858321bbfced651488ff9
- SSDEEP
  
  12288:6tGis7p49VmD3OjG7QbBtLz5WhNye5JHKVu6cig1Doa:6tGis1T3OjueLEhd5NKAD3
Score

10^/10

emotet banker persistence trojan
- Emotet
  Emotet is a trojan that is primarily spread through spam emails.
  trojan banker emotet
- Adds Run key to start application
  persistence
behavioral1

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

emotetbankerpersistencetrojan