emotet | 71943ecb3e45d0fd0c90705b7b2d18a95168dd48928dfcc954d2ccc60febb77d | Triage

Sharing

General

Target

71943ecb3e45d0fd0c90705b7b2d18a95168dd48928dfcc954d2ccc60febb77d
Size

814KB
Sample

221103-lnfvrsgha4
MD5

ffdb9c31d35bb9c450ed40288688eaa8
SHA1

86a9ea13f954ce6e24c91cdaa8ba59d61cc0c86c
SHA256

71943ecb3e45d0fd0c90705b7b2d18a95168dd48928dfcc954d2ccc60febb77d
SHA512

43d79903cfafa7b2282bdd7f484681830169516ccc1cf1b0cdd25836cf422e8501bad69caa38bb8777075ed4bc315c3d8e9639a7e3e709cda70e9a15bd0597e2
SSDEEP

12288:5sIyzbpudwh9PQx873eHeLs15pZ6yRQ8f04Tn/WMideaik:5JyzbwdG4eLsjpZfRQK/q8fk

Score

10^/10

emotet banker persistence trojan

Malware Config

Targets

- Target
  
  71943ecb3e45d0fd0c90705b7b2d18a95168dd48928dfcc954d2ccc60febb77d
- Size
  
  814KB
- MD5
  
  ffdb9c31d35bb9c450ed40288688eaa8
- SHA1
  
  86a9ea13f954ce6e24c91cdaa8ba59d61cc0c86c
- SHA256
  
  71943ecb3e45d0fd0c90705b7b2d18a95168dd48928dfcc954d2ccc60febb77d
- SHA512
  
  43d79903cfafa7b2282bdd7f484681830169516ccc1cf1b0cdd25836cf422e8501bad69caa38bb8777075ed4bc315c3d8e9639a7e3e709cda70e9a15bd0597e2
- SSDEEP
  
  12288:5sIyzbpudwh9PQx873eHeLs15pZ6yRQ8f04Tn/WMideaik:5JyzbwdG4eLsjpZfRQK/q8fk
Score

10^/10

emotet banker persistence trojan
- Emotet
  Emotet is a trojan that is primarily spread through spam emails.
  trojan banker emotet
- Adds Run key to start application
  persistence
behavioral1

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

emotetbankerpersistencetrojan