emotet | 0cbc1c4485e096b2f221d4fada9dd943cfd68c2e95d9c8257b582a5cae82d586 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0cbc1c4485e096b2f221d4fada9dd943cfd68c2e95d9c8257b582a5cae82d586
Size

818KB
Sample

221103-rmlbraddfm
MD5

f96f18feeb8a70f233b4852c5d95cb0e
SHA1

0b5dec7b04f96dde1ef5d1d61e5498d5e71e5497
SHA256

0cbc1c4485e096b2f221d4fada9dd943cfd68c2e95d9c8257b582a5cae82d586
SHA512

57bdb7ec29e1d454784c72ab4973d5114d50d14fac58a1be88390703c26437e3bef25936bc0f0ffa52add927e3c099f3d9c1820e634f3d93a40f3902e4e358b0
SSDEEP

12288:NdewIvxiRO9n6DPBt9bu8X+L81JcZl1r7x48/2aS4/2YX:NYwIvxFMXn+L8zcZ7rBwC2Y

Score

10^/10

emotet banker persistence trojan

Malware Config

Targets

- Target
  
  0cbc1c4485e096b2f221d4fada9dd943cfd68c2e95d9c8257b582a5cae82d586
- Size
  
  818KB
- MD5
  
  f96f18feeb8a70f233b4852c5d95cb0e
- SHA1
  
  0b5dec7b04f96dde1ef5d1d61e5498d5e71e5497
- SHA256
  
  0cbc1c4485e096b2f221d4fada9dd943cfd68c2e95d9c8257b582a5cae82d586
- SHA512
  
  57bdb7ec29e1d454784c72ab4973d5114d50d14fac58a1be88390703c26437e3bef25936bc0f0ffa52add927e3c099f3d9c1820e634f3d93a40f3902e4e358b0
- SSDEEP
  
  12288:NdewIvxiRO9n6DPBt9bu8X+L81JcZl1r7x48/2aS4/2YX:NYwIvxFMXn+L8zcZ7rBwC2Y
Score

10^/10

emotet banker persistence trojan
- Emotet
  Emotet is a trojan that is primarily spread through spam emails.
  trojan banker emotet
- Adds Run key to start application
  persistence
behavioral1

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

emotetbankerpersistencetrojan