emotet | 0aad91e343c34945e03119cfd59989500c9910c57555a83959c9e9025204f25f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0aad91e343c34945e03119cfd59989500c9910c57555a83959c9e9025204f25f
Size

818KB
Sample

221103-q1e68aahf8
MD5

3560237e9385435a8dcb4340d380f405
SHA1

517909f221bb61b3283755618f29533a83786c13
SHA256

0aad91e343c34945e03119cfd59989500c9910c57555a83959c9e9025204f25f
SHA512

2c75aeb51f8f900b5bb2667ee90714771a477916996fcbec910e7ff14e3caa0b8bddb7a3bf1a632e3909e2b945d687b8da5599036427bfef8848be56ad7a3407
SSDEEP

12288:NdewIvxiRO9n6DPBt9bu8X+L81JcZl1rIx48/2aS4/2YX:NYwIvxFMXn+L8zcZ7r+wC2Y

Score

10^/10

emotet banker persistence trojan

Malware Config

Targets

- Target
  
  0aad91e343c34945e03119cfd59989500c9910c57555a83959c9e9025204f25f
- Size
  
  818KB
- MD5
  
  3560237e9385435a8dcb4340d380f405
- SHA1
  
  517909f221bb61b3283755618f29533a83786c13
- SHA256
  
  0aad91e343c34945e03119cfd59989500c9910c57555a83959c9e9025204f25f
- SHA512
  
  2c75aeb51f8f900b5bb2667ee90714771a477916996fcbec910e7ff14e3caa0b8bddb7a3bf1a632e3909e2b945d687b8da5599036427bfef8848be56ad7a3407
- SSDEEP
  
  12288:NdewIvxiRO9n6DPBt9bu8X+L81JcZl1rIx48/2aS4/2YX:NYwIvxFMXn+L8zcZ7r+wC2Y
Score

10^/10

emotet banker persistence trojan
- Emotet
  Emotet is a trojan that is primarily spread through spam emails.
  trojan banker emotet
- Adds Run key to start application
  persistence
behavioral1

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

emotetbankerpersistencetrojan