emotet | 4b5655b8e09db82a8a00404fbd12044fc9fe640c6ee75953099e93fc8fb3e2db | Triage

Sharing

General

Target

fdd19b6d587faddc0528f2775f2f4cde.dll.exe
Size

814KB
Sample

221103-k98l8sgfe2
MD5

fdd19b6d587faddc0528f2775f2f4cde
SHA1

aca2a0b39e9c9f8a0452bd8435688464b9edb6a1
SHA256

4b5655b8e09db82a8a00404fbd12044fc9fe640c6ee75953099e93fc8fb3e2db
SHA512

142c32bc34c8163b1c4a58c0af57da4573b8197f3504696a04daa353d9d7384fd66f48c892da100f218e67bfe23cfc4da11d22898e1a4182e72b4b3e47a5ba43
SSDEEP

12288:5sIyzbpudwh9PQx873eHeLs15pZ6yRQNf04Tn/WMideaik:5JyzbwdG4eLsjpZfRQN/q8fk

Score

10^/10

emotet banker persistence trojan

Malware Config

Targets

- Target
  
  fdd19b6d587faddc0528f2775f2f4cde.dll.exe
- Size
  
  814KB
- MD5
  
  fdd19b6d587faddc0528f2775f2f4cde
- SHA1
  
  aca2a0b39e9c9f8a0452bd8435688464b9edb6a1
- SHA256
  
  4b5655b8e09db82a8a00404fbd12044fc9fe640c6ee75953099e93fc8fb3e2db
- SHA512
  
  142c32bc34c8163b1c4a58c0af57da4573b8197f3504696a04daa353d9d7384fd66f48c892da100f218e67bfe23cfc4da11d22898e1a4182e72b4b3e47a5ba43
- SSDEEP
  
  12288:5sIyzbpudwh9PQx873eHeLs15pZ6yRQNf04Tn/WMideaik:5JyzbwdG4eLsjpZfRQN/q8fk
Score

10^/10

emotet banker trojan persistence
- Emotet
  Emotet is a trojan that is primarily spread through spam emails.
  trojan banker emotet
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

emotetbankertrojan

behavioral2

emotetbankerpersistencetrojan