emotet | 614344836a2bd70e0e15f33a029d512f11054568cf548e80bb922b8583939f84 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

614344836a2bd70e0e15f33a029d512f11054568cf548e80bb922b8583939f84
Size

818KB
Sample

221103-pj8xjacdbk
MD5

91768da602bbea2e526ff60791420772
SHA1

03048e52de7cfae9aed7fdb783d4f53893f1715a
SHA256

614344836a2bd70e0e15f33a029d512f11054568cf548e80bb922b8583939f84
SHA512

e8e4ad326439992bf0a36e410942b3288e2708f0ad26a58b9853784c27cbf15b8c68dfd36f615abe1bdced9bd3df423071d52a13ac027b76b8d08c018d68dad8
SSDEEP

12288:NdewIvxiRO9n6DPBt9bu8X+L81JcZl1r0x48/2aS4/2YX:NYwIvxFMXn+L8zcZ7r6wC2Y

Score

10^/10

emotet banker persistence trojan

Malware Config

Targets

- Target
  
  614344836a2bd70e0e15f33a029d512f11054568cf548e80bb922b8583939f84
- Size
  
  818KB
- MD5
  
  91768da602bbea2e526ff60791420772
- SHA1
  
  03048e52de7cfae9aed7fdb783d4f53893f1715a
- SHA256
  
  614344836a2bd70e0e15f33a029d512f11054568cf548e80bb922b8583939f84
- SHA512
  
  e8e4ad326439992bf0a36e410942b3288e2708f0ad26a58b9853784c27cbf15b8c68dfd36f615abe1bdced9bd3df423071d52a13ac027b76b8d08c018d68dad8
- SSDEEP
  
  12288:NdewIvxiRO9n6DPBt9bu8X+L81JcZl1r0x48/2aS4/2YX:NYwIvxFMXn+L8zcZ7r6wC2Y
Score

10^/10

emotet banker persistence trojan
- Emotet
  Emotet is a trojan that is primarily spread through spam emails.
  trojan banker emotet
- Adds Run key to start application
  persistence
behavioral1

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

emotetbankerpersistencetrojan