emotet | 48c1ab810eb5e70f61b4d49cc3a1c117658e51c2a0efaed029d8e3a999f9c3fd | Triage

Sharing

General

Target

48c1ab810eb5e70f61b4d49cc3a1c117658e51c2a0efaed029d8e3a999f9c3fd
Size

629KB
Sample

221103-cw36lagcfr
MD5

370be00efb1c2c724fed09fe9dd482d3
SHA1

fbd2b75e1bf63d0c382e493f0fd9ab6f76dd8e0c
SHA256

48c1ab810eb5e70f61b4d49cc3a1c117658e51c2a0efaed029d8e3a999f9c3fd
SHA512

48e1bdbd694c0a61ae3ca36c35917624385285097775ab53691f6a478346f53799cee2c406c1d74ee7228b67a8c8fc1948d68ead95b5831baf0b92ef6297b8b6
SSDEEP

12288:6tGis7p49VmD3OjG7QbBtLL5WhNye5JHKVu6cig1Doa:6tGis1T3OjueLchd5NKAD3

Score

10^/10

emotet banker persistence trojan

Malware Config

Targets

- Target
  
  48c1ab810eb5e70f61b4d49cc3a1c117658e51c2a0efaed029d8e3a999f9c3fd
- Size
  
  629KB
- MD5
  
  370be00efb1c2c724fed09fe9dd482d3
- SHA1
  
  fbd2b75e1bf63d0c382e493f0fd9ab6f76dd8e0c
- SHA256
  
  48c1ab810eb5e70f61b4d49cc3a1c117658e51c2a0efaed029d8e3a999f9c3fd
- SHA512
  
  48e1bdbd694c0a61ae3ca36c35917624385285097775ab53691f6a478346f53799cee2c406c1d74ee7228b67a8c8fc1948d68ead95b5831baf0b92ef6297b8b6
- SSDEEP
  
  12288:6tGis7p49VmD3OjG7QbBtLL5WhNye5JHKVu6cig1Doa:6tGis1T3OjueLchd5NKAD3
Score

10^/10

emotet banker persistence trojan
- Emotet
  Emotet is a trojan that is primarily spread through spam emails.
  trojan banker emotet
- Adds Run key to start application
  persistence
behavioral1

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

emotetbankerpersistencetrojan