emotet | 8920dad515db8a145c1518148c4e847ebddfa3d447221234b5334afb47de80d0 | Triage

Sharing

General

Target

8920dad515db8a145c1518148c4e847ebddfa3d447221234b5334afb47de80d0
Size

814KB
Sample

221103-qq4rtsaga8
MD5

ac60f1166703c4fb98ff9a8178b8d238
SHA1

ea394fc5aa32868a4a8e4acc436c812b80b8cb14
SHA256

8920dad515db8a145c1518148c4e847ebddfa3d447221234b5334afb47de80d0
SHA512

a900b1ed52f0caec801578eb35f8a44ed8782dc00c4852d524b2605e85855c9af85840e15f3b588007f9c276a37e278e6addfedeb9f7c15436aeb8c868b3c870
SSDEEP

12288:5sIyzbpudwh9PQx873eHeLs15pZ6yRQgf04Tn/WMideaik:5JyzbwdG4eLsjpZfRQW/q8fk

Score

10^/10

emotet banker persistence trojan

Malware Config

Targets

- Target
  
  8920dad515db8a145c1518148c4e847ebddfa3d447221234b5334afb47de80d0
- Size
  
  814KB
- MD5
  
  ac60f1166703c4fb98ff9a8178b8d238
- SHA1
  
  ea394fc5aa32868a4a8e4acc436c812b80b8cb14
- SHA256
  
  8920dad515db8a145c1518148c4e847ebddfa3d447221234b5334afb47de80d0
- SHA512
  
  a900b1ed52f0caec801578eb35f8a44ed8782dc00c4852d524b2605e85855c9af85840e15f3b588007f9c276a37e278e6addfedeb9f7c15436aeb8c868b3c870
- SSDEEP
  
  12288:5sIyzbpudwh9PQx873eHeLs15pZ6yRQgf04Tn/WMideaik:5JyzbwdG4eLsjpZfRQW/q8fk
Score

10^/10

emotet banker persistence trojan
- Emotet
  Emotet is a trojan that is primarily spread through spam emails.
  trojan banker emotet
- Adds Run key to start application
  persistence
behavioral1

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

emotetbankerpersistencetrojan