emotet | 21f1c0fe4bf04ac297247d2743c6b8b4a63019f47c7910af366e9aa568925995 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

21f1c0fe4bf04ac297247d2743c6b8b4a63019f47c7910af366e9aa568925995
Size

818KB
Sample

221103-k16raaahcp
MD5

e4243d48b10cc4196804c6b6774b15af
SHA1

9e1dd771a63a106e6d862b35e6969d5260f3d280
SHA256

21f1c0fe4bf04ac297247d2743c6b8b4a63019f47c7910af366e9aa568925995
SHA512

76d27771e3588313eaa3dd910776cf9e7b90b3d62274bb1a022e862cc387a44ae650405e43d0b767b235739fe1a189aff9cee9737798548f31024d69ff699ec0
SSDEEP

12288:NdewIvxiRO9n6DPBt9bu8X+L81JcZl1rsx48/2aS4/2YX:NYwIvxFMXn+L8zcZ7rSwC2Y

Score

10^/10

emotet banker persistence trojan

Malware Config

Targets

- Target
  
  21f1c0fe4bf04ac297247d2743c6b8b4a63019f47c7910af366e9aa568925995
- Size
  
  818KB
- MD5
  
  e4243d48b10cc4196804c6b6774b15af
- SHA1
  
  9e1dd771a63a106e6d862b35e6969d5260f3d280
- SHA256
  
  21f1c0fe4bf04ac297247d2743c6b8b4a63019f47c7910af366e9aa568925995
- SHA512
  
  76d27771e3588313eaa3dd910776cf9e7b90b3d62274bb1a022e862cc387a44ae650405e43d0b767b235739fe1a189aff9cee9737798548f31024d69ff699ec0
- SSDEEP
  
  12288:NdewIvxiRO9n6DPBt9bu8X+L81JcZl1rsx48/2aS4/2YX:NYwIvxFMXn+L8zcZ7rSwC2Y
Score

10^/10

emotet banker persistence trojan
- Emotet
  Emotet is a trojan that is primarily spread through spam emails.
  trojan banker emotet
- Adds Run key to start application
  persistence
behavioral1

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

emotetbankerpersistencetrojan