emotet | 816720a67eccfdba29cdf52573f8a3787f3888f039820519a1eb24c1b2bce743 | Triage

Sharing

General

Target

kdpByAbuC.dll
Size

629KB
Sample

221103-bzjqpagadl
MD5

cb967e5bc94016585b22a06f1497082e
SHA1

0e43edf6427023d02fc952d111402bc4a4781fba
SHA256

816720a67eccfdba29cdf52573f8a3787f3888f039820519a1eb24c1b2bce743
SHA512

940130d4ecd980d5d3d5b0e77d4b7fd503c7cabd0a6c33b0cbc8976bf55161de177c602ec171d9925c33d2fac3efbe3d50f6c29f8e356703a7164c6edd5f0ce7
SSDEEP

12288:6tGis7p49VmD3OjG7QbBtL05WhNye5JHKVu6cig1Doa:6tGis1T3OjueLzhd5NKAD3

Score

10^/10

emotet banker persistence trojan

Malware Config

Targets

- Target
  
  kdpByAbuC.dll
- Size
  
  629KB
- MD5
  
  cb967e5bc94016585b22a06f1497082e
- SHA1
  
  0e43edf6427023d02fc952d111402bc4a4781fba
- SHA256
  
  816720a67eccfdba29cdf52573f8a3787f3888f039820519a1eb24c1b2bce743
- SHA512
  
  940130d4ecd980d5d3d5b0e77d4b7fd503c7cabd0a6c33b0cbc8976bf55161de177c602ec171d9925c33d2fac3efbe3d50f6c29f8e356703a7164c6edd5f0ce7
- SSDEEP
  
  12288:6tGis7p49VmD3OjG7QbBtL05WhNye5JHKVu6cig1Doa:6tGis1T3OjueLzhd5NKAD3
Score

10^/10

emotet banker trojan persistence
- Emotet
  Emotet is a trojan that is primarily spread through spam emails.
  trojan banker emotet
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

emotetbankertrojan

behavioral2

emotetbankerpersistencetrojan