emotet | 3dec98c6d66ef2fdd1df306ecd1b612c941f0361b47400a96ded87184d89fee6 | Triage

Sharing

General

Target

3dec98c6d66ef2fdd1df306ecd1b612c941f0361b47400a96ded87184d89fee6
Size

629KB
Sample

221103-dl3mraeaa2
MD5

c0a62985aacf9562e787ec68f656c036
SHA1

40b02001bf397dd506650fff14c3769137f427a4
SHA256

3dec98c6d66ef2fdd1df306ecd1b612c941f0361b47400a96ded87184d89fee6
SHA512

649472ee85496c2da1347d42e61a0331919d28d85c83a30ba7be654202331b60e2de89740d0e228e0ce5a065c9dc2d5e405f7751cf688156888df1ef5416c41c
SSDEEP

12288:6tGis7p49VmD3OjG7QbBtLz5WhNye5JHKVu6cig1Doa:6tGis1T3OjueLEhd5NKAD3

Score

10^/10

emotet banker persistence trojan

Malware Config

Targets

- Target
  
  3dec98c6d66ef2fdd1df306ecd1b612c941f0361b47400a96ded87184d89fee6
- Size
  
  629KB
- MD5
  
  c0a62985aacf9562e787ec68f656c036
- SHA1
  
  40b02001bf397dd506650fff14c3769137f427a4
- SHA256
  
  3dec98c6d66ef2fdd1df306ecd1b612c941f0361b47400a96ded87184d89fee6
- SHA512
  
  649472ee85496c2da1347d42e61a0331919d28d85c83a30ba7be654202331b60e2de89740d0e228e0ce5a065c9dc2d5e405f7751cf688156888df1ef5416c41c
- SSDEEP
  
  12288:6tGis7p49VmD3OjG7QbBtLz5WhNye5JHKVu6cig1Doa:6tGis1T3OjueLEhd5NKAD3
Score

10^/10

emotet banker persistence trojan
- Emotet
  Emotet is a trojan that is primarily spread through spam emails.
  trojan banker emotet
- Adds Run key to start application
  persistence
behavioral1

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

emotetbankerpersistencetrojan