emotet | 1034e738c48b0c3845e6694777b0f26d2bf63736bc3372424fd68b9f1b6fd094 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1034e738c48b0c3845e6694777b0f26d2bf63736bc3372424fd68b9f1b6fd094
Size

818KB
Sample

221103-nf1ajshfb6
MD5

8f6fc4f163b96164a9217942ef7c1980
SHA1

99f60cb98be26effe091f14b27021b9499a2f7f9
SHA256

1034e738c48b0c3845e6694777b0f26d2bf63736bc3372424fd68b9f1b6fd094
SHA512

98f46eba640981ff19ddb5559911b145b9ac8b879d8b42b86be1856e3230cfedc395d7f4d07a8a2588bde58969fa49f74440e3609f118db18f160c76d2084ec0
SSDEEP

12288:NdewIvxiRO9n6DPBt9bu8X+L81JcZl1r5x48/2aS4/2YX:NYwIvxFMXn+L8zcZ7rrwC2Y

Score

10^/10

emotet banker persistence trojan

Malware Config

Targets

- Target
  
  1034e738c48b0c3845e6694777b0f26d2bf63736bc3372424fd68b9f1b6fd094
- Size
  
  818KB
- MD5
  
  8f6fc4f163b96164a9217942ef7c1980
- SHA1
  
  99f60cb98be26effe091f14b27021b9499a2f7f9
- SHA256
  
  1034e738c48b0c3845e6694777b0f26d2bf63736bc3372424fd68b9f1b6fd094
- SHA512
  
  98f46eba640981ff19ddb5559911b145b9ac8b879d8b42b86be1856e3230cfedc395d7f4d07a8a2588bde58969fa49f74440e3609f118db18f160c76d2084ec0
- SSDEEP
  
  12288:NdewIvxiRO9n6DPBt9bu8X+L81JcZl1r5x48/2aS4/2YX:NYwIvxFMXn+L8zcZ7rrwC2Y
Score

10^/10

emotet banker persistence trojan
- Emotet
  Emotet is a trojan that is primarily spread through spam emails.
  trojan banker emotet
- Adds Run key to start application
  persistence
behavioral1

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

emotetbankerpersistencetrojan