emotet | 56713bd5522f3eb3cc30fb055a2d9b454772ecc57ff6636c951b57772eaf3a21 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

56713bd5522f3eb3cc30fb055a2d9b454772ecc57ff6636c951b57772eaf3a21
Size

633KB
Sample

221102-xa8t6sddhp
MD5

12b08ea94baee46a84921a26e5978d1f
SHA1

4371a98c1ca61ae63fcb0bd558da8f0a92abc1bd
SHA256

56713bd5522f3eb3cc30fb055a2d9b454772ecc57ff6636c951b57772eaf3a21
SHA512

b5d39ee38706e0177c4669d13aadc4347f5f8382bed8f7b8b172288cdeb8e8c0c11197a27a8df6fc08a5e6237142419ac8605e3855b643834911ade358e628bd
SSDEEP

12288:vTiWqRYt1iDEOTiedhDiXsn2zDvXLxj/e:vTiWg3EOT3riXsnw/

Score

10^/10

emotet banker persistence trojan

Malware Config

Targets

- Target
  
  56713bd5522f3eb3cc30fb055a2d9b454772ecc57ff6636c951b57772eaf3a21
- Size
  
  633KB
- MD5
  
  12b08ea94baee46a84921a26e5978d1f
- SHA1
  
  4371a98c1ca61ae63fcb0bd558da8f0a92abc1bd
- SHA256
  
  56713bd5522f3eb3cc30fb055a2d9b454772ecc57ff6636c951b57772eaf3a21
- SHA512
  
  b5d39ee38706e0177c4669d13aadc4347f5f8382bed8f7b8b172288cdeb8e8c0c11197a27a8df6fc08a5e6237142419ac8605e3855b643834911ade358e628bd
- SSDEEP
  
  12288:vTiWqRYt1iDEOTiedhDiXsn2zDvXLxj/e:vTiWg3EOT3riXsnw/
Score

10^/10

emotet banker persistence trojan
- Emotet
  Emotet is a trojan that is primarily spread through spam emails.
  trojan banker emotet
- Adds Run key to start application
  persistence
behavioral1

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

emotetbankerpersistencetrojan