emotet | b6048a91289f0a4856c91f984c02b5e2d15db60096dd49cc31cd99866c2b3df0 | Triage

Sharing

General

Target

b6048a91289f0a4856c91f984c02b5e2d15db60096dd49cc31cd99866c2b3df0
Size

727KB
Sample

221102-zzd27sbgf4
MD5

1ffe85edddc25d6f56222c2bf76083a7
SHA1

fbbca88309dfcf9b52b90b27727375b50a4e5b5e
SHA256

b6048a91289f0a4856c91f984c02b5e2d15db60096dd49cc31cd99866c2b3df0
SHA512

b3c9c8383886164bf590b71f9b1612dbf3e2eba842da3280100fa4282877b0777e79debca0cc4f8dcfca1a74b8cca0ef3b598ea5e93a6344a68a841aaec7997f
SSDEEP

12288:ezhsu7PWe6Fth9tmzQS+37pzGIz/mXpo1z+BSjq+DsCJqzfo:ktR6rhjmzhsT/Yg6YjtJqzf

Score

10^/10

emotet banker persistence trojan

Malware Config

Targets

- Target
  
  b6048a91289f0a4856c91f984c02b5e2d15db60096dd49cc31cd99866c2b3df0
- Size
  
  727KB
- MD5
  
  1ffe85edddc25d6f56222c2bf76083a7
- SHA1
  
  fbbca88309dfcf9b52b90b27727375b50a4e5b5e
- SHA256
  
  b6048a91289f0a4856c91f984c02b5e2d15db60096dd49cc31cd99866c2b3df0
- SHA512
  
  b3c9c8383886164bf590b71f9b1612dbf3e2eba842da3280100fa4282877b0777e79debca0cc4f8dcfca1a74b8cca0ef3b598ea5e93a6344a68a841aaec7997f
- SSDEEP
  
  12288:ezhsu7PWe6Fth9tmzQS+37pzGIz/mXpo1z+BSjq+DsCJqzfo:ktR6rhjmzhsT/Yg6YjtJqzf
Score

10^/10

emotet banker persistence trojan
- Emotet
  Emotet is a trojan that is primarily spread through spam emails.
  trojan banker emotet
- Adds Run key to start application
  persistence
behavioral1

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

emotetbankerpersistencetrojan