emotet | dcdca06482e2ac4b76f812fa5427f6f8209e435e5bc27be56c6b779c25992c26 | Triage

Sharing

General

Target

dcdca06482e2ac4b76f812fa5427f6f8209e435e5bc27be56c6b779c25992c26
Size

629KB
Sample

221103-d43qgaebe2
MD5

a8bf0a0883c90c2a1ad76ed96277c793
SHA1

e03db70958ab026644e77c2289acd23a9c25f037
SHA256

dcdca06482e2ac4b76f812fa5427f6f8209e435e5bc27be56c6b779c25992c26
SHA512

3b2c4747d10c2be1daabbc5c1075a5fcc770854b07c355254b57229f50ae9932a2c7011d9929baec8cbca03025af10935a308fdfffc4d0fb21cc739b2d5913cc
SSDEEP

12288:6tGis7p49VmD3OjG7QbBtLq5WhNye5JHKVu6cig1Doa:6tGis1T3OjueLlhd5NKAD3

Score

10^/10

emotet banker persistence trojan

Malware Config

Targets

- Target
  
  dcdca06482e2ac4b76f812fa5427f6f8209e435e5bc27be56c6b779c25992c26
- Size
  
  629KB
- MD5
  
  a8bf0a0883c90c2a1ad76ed96277c793
- SHA1
  
  e03db70958ab026644e77c2289acd23a9c25f037
- SHA256
  
  dcdca06482e2ac4b76f812fa5427f6f8209e435e5bc27be56c6b779c25992c26
- SHA512
  
  3b2c4747d10c2be1daabbc5c1075a5fcc770854b07c355254b57229f50ae9932a2c7011d9929baec8cbca03025af10935a308fdfffc4d0fb21cc739b2d5913cc
- SSDEEP
  
  12288:6tGis7p49VmD3OjG7QbBtLq5WhNye5JHKVu6cig1Doa:6tGis1T3OjueLlhd5NKAD3
Score

10^/10

emotet banker persistence trojan
- Emotet
  Emotet is a trojan that is primarily spread through spam emails.
  trojan banker emotet
- Adds Run key to start application
  persistence
behavioral1

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

emotetbankerpersistencetrojan