emotet | 364f2492c05f9bd77f0e3690cfa98ba86ac014d3db97c975459fb8d165fd93be | Triage

Sharing

Copy URL Twitter E-mail

General

Target

364f2492c05f9bd77f0e3690cfa98ba86ac014d3db97c975459fb8d165fd93be
Size

727KB
Sample

221103-e5q9haeeb6
MD5

27bc818c38b231ebe126b5aba9d1cb51
SHA1

0c9278242e30ad53986209469bd9bd9d5554ee22
SHA256

364f2492c05f9bd77f0e3690cfa98ba86ac014d3db97c975459fb8d165fd93be
SHA512

729dc14d6a11cf3d0a4e8a974179bfb347f00cd3f04d9d62d528a03c6b56e86f8253873e065197c6da559b6acb0874827b62aba8ee2b3079373e2d3b746590ac
SSDEEP

12288:ezhsu7PWe6Fth9tmzQS+37pzGIz/mXpo1z+wSjq+DsCJqzfo:ktR6rhjmzhsT/Yg61jtJqzf

Score

10^/10

emotet banker persistence trojan

Malware Config

Targets

- Target
  
  364f2492c05f9bd77f0e3690cfa98ba86ac014d3db97c975459fb8d165fd93be
- Size
  
  727KB
- MD5
  
  27bc818c38b231ebe126b5aba9d1cb51
- SHA1
  
  0c9278242e30ad53986209469bd9bd9d5554ee22
- SHA256
  
  364f2492c05f9bd77f0e3690cfa98ba86ac014d3db97c975459fb8d165fd93be
- SHA512
  
  729dc14d6a11cf3d0a4e8a974179bfb347f00cd3f04d9d62d528a03c6b56e86f8253873e065197c6da559b6acb0874827b62aba8ee2b3079373e2d3b746590ac
- SSDEEP
  
  12288:ezhsu7PWe6Fth9tmzQS+37pzGIz/mXpo1z+wSjq+DsCJqzfo:ktR6rhjmzhsT/Yg61jtJqzf
Score

10^/10

emotet banker persistence trojan
- Emotet
  Emotet is a trojan that is primarily spread through spam emails.
  trojan banker emotet
- Adds Run key to start application
  persistence
behavioral1

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

emotetbankerpersistencetrojan