emotet | 7bb6c72a8fe77bd3dd08a30f8b33c9b6b63cc20c9aa15d54b5f9ec6153d72362 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

7bb6c72a8fe77bd3dd08a30f8b33c9b6b63cc20c9aa15d54b5f9ec6153d72362
Size

727KB
Sample

221103-czzmksdge9
MD5

480d0970add3d65493ee6d9e09afb249
SHA1

0211c55af26cd6d6552cc6ac24e8153db9dfcb35
SHA256

7bb6c72a8fe77bd3dd08a30f8b33c9b6b63cc20c9aa15d54b5f9ec6153d72362
SHA512

72f3a156c815134d7cdcd2bed6f403512b29b4f2d4ea23c13476c06455514e4a63785b366cbbdd0c6d0a642ee96e36d7f139f316479445e52f5ea171fbf3f93b
SSDEEP

12288:ezhsu7PWe6Fth9tmzQS+37pzGIz/mXpo1z+uSjq+DsCJqzfo:ktR6rhjmzhsT/Yg6PjtJqzf

Score

10^/10

emotet banker persistence trojan

Malware Config

Targets

- Target
  
  7bb6c72a8fe77bd3dd08a30f8b33c9b6b63cc20c9aa15d54b5f9ec6153d72362
- Size
  
  727KB
- MD5
  
  480d0970add3d65493ee6d9e09afb249
- SHA1
  
  0211c55af26cd6d6552cc6ac24e8153db9dfcb35
- SHA256
  
  7bb6c72a8fe77bd3dd08a30f8b33c9b6b63cc20c9aa15d54b5f9ec6153d72362
- SHA512
  
  72f3a156c815134d7cdcd2bed6f403512b29b4f2d4ea23c13476c06455514e4a63785b366cbbdd0c6d0a642ee96e36d7f139f316479445e52f5ea171fbf3f93b
- SSDEEP
  
  12288:ezhsu7PWe6Fth9tmzQS+37pzGIz/mXpo1z+uSjq+DsCJqzfo:ktR6rhjmzhsT/Yg6PjtJqzf
Score

10^/10

emotet banker persistence trojan
- Emotet
  Emotet is a trojan that is primarily spread through spam emails.
  trojan banker emotet
- Adds Run key to start application
  persistence
behavioral1

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

emotetbankerpersistencetrojan