emotet | de05ce1e7b8e7e79aa88121f56af0c0e0ba93ef73e077913b3c8e1915d0fcfa0 | Triage

Sharing

General

Target

de05ce1e7b8e7e79aa88121f56af0c0e0ba93ef73e077913b3c8e1915d0fcfa0
Size

818KB
Sample

221103-jhyghsfga8
MD5

b6bb75051879f330cbdb108e6b472a70
SHA1

d152f6b589684de76cc6318bc2c8f09ff5e5464d
SHA256

de05ce1e7b8e7e79aa88121f56af0c0e0ba93ef73e077913b3c8e1915d0fcfa0
SHA512

5dfd45ca4526f1c0afb5516f182e650c3807c0faf1148402e8fe8dd65821c8f2a15b0f100aeca40e24a6a69308f82e3266d0cfcbf4117e7248ee2d20b2625e2e
SSDEEP

12288:NdewIvxiRO9n6DPBt9bu8X+L81JcZl1ryx48/2aS4/2YX:NYwIvxFMXn+L8zcZ7rkwC2Y

Score

10^/10

emotet banker persistence trojan

Malware Config

Targets

- Target
  
  de05ce1e7b8e7e79aa88121f56af0c0e0ba93ef73e077913b3c8e1915d0fcfa0
- Size
  
  818KB
- MD5
  
  b6bb75051879f330cbdb108e6b472a70
- SHA1
  
  d152f6b589684de76cc6318bc2c8f09ff5e5464d
- SHA256
  
  de05ce1e7b8e7e79aa88121f56af0c0e0ba93ef73e077913b3c8e1915d0fcfa0
- SHA512
  
  5dfd45ca4526f1c0afb5516f182e650c3807c0faf1148402e8fe8dd65821c8f2a15b0f100aeca40e24a6a69308f82e3266d0cfcbf4117e7248ee2d20b2625e2e
- SSDEEP
  
  12288:NdewIvxiRO9n6DPBt9bu8X+L81JcZl1ryx48/2aS4/2YX:NYwIvxFMXn+L8zcZ7rkwC2Y
Score

10^/10

emotet banker persistence trojan
- Emotet
  Emotet is a trojan that is primarily spread through spam emails.
  trojan banker emotet
- Adds Run key to start application
  persistence
behavioral1

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

emotetbankerpersistencetrojan