emotet | fcfdf98ad8ba0dc4e423f97a9fc8f0ef9b5988326199c229ee21381b8c759062 | Triage

Sharing

General

Target

fcfdf98ad8ba0dc4e423f97a9fc8f0ef9b5988326199c229ee21381b8c759062
Size

809KB
Sample

221102-z4gnwsedcj
MD5

3ca1de6580217e325eb23917f261fcbf
SHA1

4dd19d94a920a52ba611ece5b517498ca67bf0d8
SHA256

fcfdf98ad8ba0dc4e423f97a9fc8f0ef9b5988326199c229ee21381b8c759062
SHA512

17cd35b9fd0f8ab2f13ea609c3988463244f7610c7771bd0d7b4d6c3df48383579ae205a09dd5d7b0081f53c4fd0a1e1dbfbbeed5be6e8d39aacfb2e073cee4f
SSDEEP

24576:fp7r9TOZH6Xf/Xfs11IWzsY6gB/d833dBG:hX9qZH4f01IWzsTgRw3C

Score

10^/10

emotet banker persistence trojan

Malware Config

Targets

- Target
  
  fcfdf98ad8ba0dc4e423f97a9fc8f0ef9b5988326199c229ee21381b8c759062
- Size
  
  809KB
- MD5
  
  3ca1de6580217e325eb23917f261fcbf
- SHA1
  
  4dd19d94a920a52ba611ece5b517498ca67bf0d8
- SHA256
  
  fcfdf98ad8ba0dc4e423f97a9fc8f0ef9b5988326199c229ee21381b8c759062
- SHA512
  
  17cd35b9fd0f8ab2f13ea609c3988463244f7610c7771bd0d7b4d6c3df48383579ae205a09dd5d7b0081f53c4fd0a1e1dbfbbeed5be6e8d39aacfb2e073cee4f
- SSDEEP
  
  24576:fp7r9TOZH6Xf/Xfs11IWzsY6gB/d833dBG:hX9qZH4f01IWzsTgRw3C
Score

10^/10

emotet banker trojan persistence
- Emotet
  Emotet is a trojan that is primarily spread through spam emails.
  trojan banker emotet
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

emotetbankertrojan

behavioral2

emotetbankerpersistencetrojan