emotet | 3570ac965e8704aa56dc9047205341c574e0566ec063d75eb5639a3cbe780a19 | Triage

Sharing

General

Target

af9805508a8d713d6124ce20ad8fbe94.dll.exe
Size

727KB
Sample

221103-bp6gpsfhen
MD5

af9805508a8d713d6124ce20ad8fbe94
SHA1

09d838cedcef04ff54fbacb612f60d23f41466ea
SHA256

3570ac965e8704aa56dc9047205341c574e0566ec063d75eb5639a3cbe780a19
SHA512

870d1b66ed3efbc7b4928317993387875ab19ccd41e63416bbcf739aa195de1bab9f45a66e03a06eddbae463d89984e39e9d04d8d1233a936c8d7ca4e3a27d69
SSDEEP

12288:ezhsu7PWe6Fth9tmzQS+37pzGIz/mXpo1z+NSjq+DsCJqzfo:ktR6rhjmzhsT/Yg6cjtJqzf

Score

10^/10

emotet banker persistence trojan

Malware Config

Targets

- Target
  
  af9805508a8d713d6124ce20ad8fbe94.dll.exe
- Size
  
  727KB
- MD5
  
  af9805508a8d713d6124ce20ad8fbe94
- SHA1
  
  09d838cedcef04ff54fbacb612f60d23f41466ea
- SHA256
  
  3570ac965e8704aa56dc9047205341c574e0566ec063d75eb5639a3cbe780a19
- SHA512
  
  870d1b66ed3efbc7b4928317993387875ab19ccd41e63416bbcf739aa195de1bab9f45a66e03a06eddbae463d89984e39e9d04d8d1233a936c8d7ca4e3a27d69
- SSDEEP
  
  12288:ezhsu7PWe6Fth9tmzQS+37pzGIz/mXpo1z+NSjq+DsCJqzfo:ktR6rhjmzhsT/Yg6cjtJqzf
Score

10^/10

emotet banker trojan persistence
- Emotet
  Emotet is a trojan that is primarily spread through spam emails.
  trojan banker emotet
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

emotetbankertrojan

behavioral2

emotetbankerpersistencetrojan