emotet | b21c2b76d4e437dd9ad6384cf933ae222375379798bfba87af2de0ec20a91f6f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b21c2b76d4e437dd9ad6384cf933ae222375379798bfba87af2de0ec20a91f6f
Size

727KB
Sample

221103-bcz46afgfk
MD5

9c4b5c4c96dffac694749e903e575ee3
SHA1

b94dad978bf94dac6033ffa5aa782860aa7b9633
SHA256

b21c2b76d4e437dd9ad6384cf933ae222375379798bfba87af2de0ec20a91f6f
SHA512

62b04400bacf2974e2e75e155480926fd875ecef37f2cbb1dfe2f0da35e4aa768637b140259d8548f0fad045204bae2b1142aea00dc61d0a57ffec506594fc00
SSDEEP

12288:ezhsu7PWe6Fth9tmzQS+37pzGIz/mXpo1z+BSjq+DsCJqzfo:ktR6rhjmzhsT/Yg6YjtJqzf

Score

10^/10

emotet banker persistence trojan

Malware Config

Targets

- Target
  
  b21c2b76d4e437dd9ad6384cf933ae222375379798bfba87af2de0ec20a91f6f
- Size
  
  727KB
- MD5
  
  9c4b5c4c96dffac694749e903e575ee3
- SHA1
  
  b94dad978bf94dac6033ffa5aa782860aa7b9633
- SHA256
  
  b21c2b76d4e437dd9ad6384cf933ae222375379798bfba87af2de0ec20a91f6f
- SHA512
  
  62b04400bacf2974e2e75e155480926fd875ecef37f2cbb1dfe2f0da35e4aa768637b140259d8548f0fad045204bae2b1142aea00dc61d0a57ffec506594fc00
- SSDEEP
  
  12288:ezhsu7PWe6Fth9tmzQS+37pzGIz/mXpo1z+BSjq+DsCJqzfo:ktR6rhjmzhsT/Yg6YjtJqzf
Score

10^/10

emotet banker persistence trojan
- Emotet
  Emotet is a trojan that is primarily spread through spam emails.
  trojan banker emotet
- Adds Run key to start application
  persistence
behavioral1

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

emotetbankerpersistencetrojan