emotet | bdd32bb2b6134ce2a40d934ce4a89a974f70223149467817fc0e11c4b58272b5 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bdd32bb2b6134ce2a40d934ce4a89a974f70223149467817fc0e11c4b58272b5
Size

818KB
Sample

221103-jfxgfaabbq
MD5

6b9b9daf2a00e3c2bbb315d5b229c2e2
SHA1

c370a00363ec977959eecfda6559c665c3ff1e4c
SHA256

bdd32bb2b6134ce2a40d934ce4a89a974f70223149467817fc0e11c4b58272b5
SHA512

1eed644b88174e4195f23959406c6a021190ccc6106029c2bd666972956441c656239aea8655f044f1e20e39e4c9345ca52b5e6ecec47c836c12573d98f59bb8
SSDEEP

12288:NdewIvxiRO9n6DPBt9bu8X+L81JcZl1rvx48/2aS4/2YX:NYwIvxFMXn+L8zcZ7r1wC2Y

Score

10^/10

emotet banker persistence trojan

Malware Config

Targets

- Target
  
  bdd32bb2b6134ce2a40d934ce4a89a974f70223149467817fc0e11c4b58272b5
- Size
  
  818KB
- MD5
  
  6b9b9daf2a00e3c2bbb315d5b229c2e2
- SHA1
  
  c370a00363ec977959eecfda6559c665c3ff1e4c
- SHA256
  
  bdd32bb2b6134ce2a40d934ce4a89a974f70223149467817fc0e11c4b58272b5
- SHA512
  
  1eed644b88174e4195f23959406c6a021190ccc6106029c2bd666972956441c656239aea8655f044f1e20e39e4c9345ca52b5e6ecec47c836c12573d98f59bb8
- SSDEEP
  
  12288:NdewIvxiRO9n6DPBt9bu8X+L81JcZl1rvx48/2aS4/2YX:NYwIvxFMXn+L8zcZ7r1wC2Y
Score

10^/10

emotet banker persistence trojan
- Emotet
  Emotet is a trojan that is primarily spread through spam emails.
  trojan banker emotet
- Adds Run key to start application
  persistence
behavioral1

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

emotetbankerpersistencetrojan