emotet | e4dac385eec7c6f79a2269ab644b536a5ad710e5115678203818484551f9fe6a | Triage

Sharing

General

Target

e4dac385eec7c6f79a2269ab644b536a5ad710e5115678203818484551f9fe6a
Size

629KB
Sample

221103-b5hqksgagk
MD5

96da2d1ab2042535e3cea546f85fc5cb
SHA1

d755d255b963a68fd84ad711e398555453d90471
SHA256

e4dac385eec7c6f79a2269ab644b536a5ad710e5115678203818484551f9fe6a
SHA512

95946aa3def5ff6c20d217122e22445c6859c55c853021a75489ebd6f46e0d891f9578d58ea882c76d810070a2ea2e06798eeb88dba392a50b8acb197da25a59
SSDEEP

12288:6tGis7p49VmD3OjG7QbBtLG5WhNye5JHKVu6cig1Doa:6tGis1T3OjueLZhd5NKAD3

Score

10^/10

emotet banker persistence trojan

Malware Config

Targets

- Target
  
  e4dac385eec7c6f79a2269ab644b536a5ad710e5115678203818484551f9fe6a
- Size
  
  629KB
- MD5
  
  96da2d1ab2042535e3cea546f85fc5cb
- SHA1
  
  d755d255b963a68fd84ad711e398555453d90471
- SHA256
  
  e4dac385eec7c6f79a2269ab644b536a5ad710e5115678203818484551f9fe6a
- SHA512
  
  95946aa3def5ff6c20d217122e22445c6859c55c853021a75489ebd6f46e0d891f9578d58ea882c76d810070a2ea2e06798eeb88dba392a50b8acb197da25a59
- SSDEEP
  
  12288:6tGis7p49VmD3OjG7QbBtLG5WhNye5JHKVu6cig1Doa:6tGis1T3OjueLZhd5NKAD3
Score

10^/10

emotet banker persistence trojan
- Emotet
  Emotet is a trojan that is primarily spread through spam emails.
  trojan banker emotet
- Adds Run key to start application
  persistence
behavioral1

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

emotetbankerpersistencetrojan