emotet | 7cba91909467e21e81582efcfee58d81c89c7acdf9cc4000916e29663c804009 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

7cba91909467e21e81582efcfee58d81c89c7acdf9cc4000916e29663c804009
Size

633KB
Sample

221102-yl5gkabdd3
MD5

8bf0fe89933541125aba4711c55eea16
SHA1

fe771c20ea0b7984ae6977d13ca947efe87379fc
SHA256

7cba91909467e21e81582efcfee58d81c89c7acdf9cc4000916e29663c804009
SHA512

0cb1817b96ce14fc89b7fecb95a84466f79542dc5bbbbc163c76c50c57488d3c31b24f90a58d0c09556a25527ad5e83804a5485137d87de5b4700a341c647a54
SSDEEP

12288:vTiWqRYt1iDEOTiedhDibsn2zDvXLxj/e:vTiWg3EOT3ribsnw/

Score

10^/10

emotet banker persistence trojan

Malware Config

Targets

- Target
  
  7cba91909467e21e81582efcfee58d81c89c7acdf9cc4000916e29663c804009
- Size
  
  633KB
- MD5
  
  8bf0fe89933541125aba4711c55eea16
- SHA1
  
  fe771c20ea0b7984ae6977d13ca947efe87379fc
- SHA256
  
  7cba91909467e21e81582efcfee58d81c89c7acdf9cc4000916e29663c804009
- SHA512
  
  0cb1817b96ce14fc89b7fecb95a84466f79542dc5bbbbc163c76c50c57488d3c31b24f90a58d0c09556a25527ad5e83804a5485137d87de5b4700a341c647a54
- SSDEEP
  
  12288:vTiWqRYt1iDEOTiedhDibsn2zDvXLxj/e:vTiWg3EOT3ribsnw/
Score

10^/10

emotet banker persistence trojan
- Emotet
  Emotet is a trojan that is primarily spread through spam emails.
  trojan banker emotet
- Adds Run key to start application
  persistence
behavioral1

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

emotetbankerpersistencetrojan