emotet | 4dfa9ea250abc5e45c4510568ba1dcabed11e440cc25024c5d5ddc8769c92b76 | Triage

Sharing

General

Target

4dfa9ea250abc5e45c4510568ba1dcabed11e440cc25024c5d5ddc8769c92b76
Size

814KB
Sample

221103-hqy8cahgfk
MD5

fc49d0b2a2b6d748f2e36264aa71afaa
SHA1

d15d39344a21ef5189a7e58370143a09acb5d1ff
SHA256

4dfa9ea250abc5e45c4510568ba1dcabed11e440cc25024c5d5ddc8769c92b76
SHA512

968fc99145a2279eb43995a7073dad21f4c47712613cd7d9a28ce43099d80fd526a3f9dbd0b35293c7a54b56f4780be788ef734635119267ee777483675167bc
SSDEEP

12288:5sIyzbpudwh9PQx873eHeLs15pZ6yRQDf04Tn/WMideaik:5JyzbwdG4eLsjpZfRQn/q8fk

Score

10^/10

emotet banker persistence trojan

Malware Config

Targets

- Target
  
  4dfa9ea250abc5e45c4510568ba1dcabed11e440cc25024c5d5ddc8769c92b76
- Size
  
  814KB
- MD5
  
  fc49d0b2a2b6d748f2e36264aa71afaa
- SHA1
  
  d15d39344a21ef5189a7e58370143a09acb5d1ff
- SHA256
  
  4dfa9ea250abc5e45c4510568ba1dcabed11e440cc25024c5d5ddc8769c92b76
- SHA512
  
  968fc99145a2279eb43995a7073dad21f4c47712613cd7d9a28ce43099d80fd526a3f9dbd0b35293c7a54b56f4780be788ef734635119267ee777483675167bc
- SSDEEP
  
  12288:5sIyzbpudwh9PQx873eHeLs15pZ6yRQDf04Tn/WMideaik:5JyzbwdG4eLsjpZfRQn/q8fk
Score

10^/10

emotet banker persistence trojan
- Emotet
  Emotet is a trojan that is primarily spread through spam emails.
  trojan banker emotet
- Adds Run key to start application
  persistence
behavioral1

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

emotetbankerpersistencetrojan