emotet | ee6c312fccf1e22f76c0a9b950c3692b94425bad511ba75f08e1a4b208824ec6 | Triage

Sharing

General

Target

ee6c312fccf1e22f76c0a9b950c3692b94425bad511ba75f08e1a4b208824ec6
Size

727KB
Sample

221103-f9tqvshdal
MD5

0eb765de73eec37ea44cc8b686d79bd2
SHA1

fc6db10f7b1951caf348ebcb8677c7e2e1f7ed55
SHA256

ee6c312fccf1e22f76c0a9b950c3692b94425bad511ba75f08e1a4b208824ec6
SHA512

fda5a993c70ec0c92efb86cee42c18d2365bf24f5b1ebf801e6b0f5f18a8312cc59c30fa7086090e2ade8bcaccac601cc14d848204073b7e5ce95473f71ca2dd
SSDEEP

12288:ezhsu7PWe6Fth9tmzQS+37pzGIz/mXpo1z+uSjq+DsCJqzfo:ktR6rhjmzhsT/Yg6PjtJqzf

Score

10^/10

emotet banker persistence trojan

Malware Config

Targets

- Target
  
  ee6c312fccf1e22f76c0a9b950c3692b94425bad511ba75f08e1a4b208824ec6
- Size
  
  727KB
- MD5
  
  0eb765de73eec37ea44cc8b686d79bd2
- SHA1
  
  fc6db10f7b1951caf348ebcb8677c7e2e1f7ed55
- SHA256
  
  ee6c312fccf1e22f76c0a9b950c3692b94425bad511ba75f08e1a4b208824ec6
- SHA512
  
  fda5a993c70ec0c92efb86cee42c18d2365bf24f5b1ebf801e6b0f5f18a8312cc59c30fa7086090e2ade8bcaccac601cc14d848204073b7e5ce95473f71ca2dd
- SSDEEP
  
  12288:ezhsu7PWe6Fth9tmzQS+37pzGIz/mXpo1z+uSjq+DsCJqzfo:ktR6rhjmzhsT/Yg6PjtJqzf
Score

10^/10

emotet banker persistence trojan
- Emotet
  Emotet is a trojan that is primarily spread through spam emails.
  trojan banker emotet
- Adds Run key to start application
  persistence
behavioral1

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

emotetbankerpersistencetrojan