emotet | f62e0dadeb8495291d489a17587af32f543bf1073b1be2f514fe330e4bba43e1 | Triage

Sharing

General

Target

c04067084b8b785fcf350fe5ba32cdd7.exe
Size

818KB
Sample

221103-shv6tsbff3
MD5

c04067084b8b785fcf350fe5ba32cdd7
SHA1

61db43215436864af1fefe19606e580dbf2e2ecd
SHA256

f62e0dadeb8495291d489a17587af32f543bf1073b1be2f514fe330e4bba43e1
SHA512

acdba831cbf1256d993dc96721d6cc3beb55af3d37cfe4bda71e1e6dcf8df9092fecda1e0f086dd561f40b27474602d8b4f57ca79db347c90cd48defbdcaa35d
SSDEEP

12288:NdewIvxiRO9n6DPBt9bu8X+L81JcZl1r9x48/2aS4/2YX:NYwIvxFMXn+L8zcZ7rfwC2Y

Score

10^/10

emotet banker persistence trojan

Malware Config

Targets

- Target
  
  c04067084b8b785fcf350fe5ba32cdd7.exe
- Size
  
  818KB
- MD5
  
  c04067084b8b785fcf350fe5ba32cdd7
- SHA1
  
  61db43215436864af1fefe19606e580dbf2e2ecd
- SHA256
  
  f62e0dadeb8495291d489a17587af32f543bf1073b1be2f514fe330e4bba43e1
- SHA512
  
  acdba831cbf1256d993dc96721d6cc3beb55af3d37cfe4bda71e1e6dcf8df9092fecda1e0f086dd561f40b27474602d8b4f57ca79db347c90cd48defbdcaa35d
- SSDEEP
  
  12288:NdewIvxiRO9n6DPBt9bu8X+L81JcZl1r9x48/2aS4/2YX:NYwIvxFMXn+L8zcZ7rfwC2Y
Score

10^/10

emotet banker trojan persistence
- Emotet
  Emotet is a trojan that is primarily spread through spam emails.
  trojan banker emotet
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

emotetbankertrojan

behavioral2

emotetbankerpersistencetrojan