emotet | bf0a768afa812263e1d7cae61c5c4f6bb1c1ad8e902fff0a35e1f5014b01302f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bf0a768afa812263e1d7cae61c5c4f6bb1c1ad8e902fff0a35e1f5014b01302f
Size

814KB
Sample

221103-sekwpadhdq
MD5

e42bdf6ad74b4731b93dfd50d848f806
SHA1

60201206aeef299a08279257cc8ee24a528d8fb1
SHA256

bf0a768afa812263e1d7cae61c5c4f6bb1c1ad8e902fff0a35e1f5014b01302f
SHA512

0190eb9d3f21b1b10a29b490ecf293b7376902f7f0b78c699499887a9bb2cc8e28f44d9258fae983ae2c44b2e61c5629437ab379e17b42370fbcaab30623d9c2
SSDEEP

12288:5sIyzbpudwh9PQx873eHeLs15pZ6yRQgf04Tn/WMideaik:5JyzbwdG4eLsjpZfRQW/q8fk

Score

10^/10

emotet banker persistence trojan

Malware Config

Targets

- Target
  
  bf0a768afa812263e1d7cae61c5c4f6bb1c1ad8e902fff0a35e1f5014b01302f
- Size
  
  814KB
- MD5
  
  e42bdf6ad74b4731b93dfd50d848f806
- SHA1
  
  60201206aeef299a08279257cc8ee24a528d8fb1
- SHA256
  
  bf0a768afa812263e1d7cae61c5c4f6bb1c1ad8e902fff0a35e1f5014b01302f
- SHA512
  
  0190eb9d3f21b1b10a29b490ecf293b7376902f7f0b78c699499887a9bb2cc8e28f44d9258fae983ae2c44b2e61c5629437ab379e17b42370fbcaab30623d9c2
- SSDEEP
  
  12288:5sIyzbpudwh9PQx873eHeLs15pZ6yRQgf04Tn/WMideaik:5JyzbwdG4eLsjpZfRQW/q8fk
Score

10^/10

emotet banker persistence trojan
- Emotet
  Emotet is a trojan that is primarily spread through spam emails.
  trojan banker emotet
- Adds Run key to start application
  persistence
behavioral1

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

emotetbankerpersistencetrojan