Extracted

• • Target

    0311.xls

  • Size

    217KB

  • MD5

    16932d45492cfac03e844dfb0f0b3827

  • SHA1

    2968cb1a0ea2b5d4121215033a16b048b01994a6

  • SHA256

    6a6b3087e607cb76ce671d1009ddb70bdea147c18bd9a44e6704158c6ecfa28a

  • SHA512

    df096f00a9bc414c778a26b6cef3fff1b3e68e75315ef23d509962cb42152e0678df9950d110f17ed3de715aaa17a28212c1c32e9eeb33695a81afed1e2a24cf

  • SSDEEP

    6144:OKpb8rGYrMPe3q7Q0XV5xtuEsi8/dg8yY+TAQXTHGUMEyP5p6f5jQm9:nbGUMVWlb9

  Score

  10^/10

  emotetbankertrojan

  • Emotet

    Emotet is a trojan that is primarily spread through spam emails.

    trojanbankeremotet

  • Process spawned unexpected child process

    This typically indicates the parent process was compromised via an exploit or macro.

  • Downloads MZ/PE file

  • Loads dropped DLL

  behavioral1behavioral2