emotet | fcb12e08479770d247c20cf04d1743cdf5b3de699d648e1dfa73909182ca0d88 | Triage

Sharing

General

Target

fcb12e08479770d247c20cf04d1743cdf5b3de699d648e1dfa73909182ca0d88
Size

712KB
Sample

221103-t85nmacef2
MD5

180a47d1b53f4b4f170ec6a9a322288e
SHA1

f34e7b6bbca23876c18dae20667afe64f4014aca
SHA256

fcb12e08479770d247c20cf04d1743cdf5b3de699d648e1dfa73909182ca0d88
SHA512

b7103a9f624dacb57023ad6e3e9ecd4f49ede5ccd8deeec5976c52567037c935fc70b62ce3abbcdaa7a24686be8b03039e16d4506cae3c8c424f74220fefdc08
SSDEEP

12288:Jm3ryg7+tKkrxfIoAGA8YHrKreDkca011br+0MACwlg6WggbE/A4:JuryW+5rNIoJZYHrKreQBjWCN4

Score

10^/10

emotet banker persistence trojan

Malware Config

Targets

- Target
  
  fcb12e08479770d247c20cf04d1743cdf5b3de699d648e1dfa73909182ca0d88
- Size
  
  712KB
- MD5
  
  180a47d1b53f4b4f170ec6a9a322288e
- SHA1
  
  f34e7b6bbca23876c18dae20667afe64f4014aca
- SHA256
  
  fcb12e08479770d247c20cf04d1743cdf5b3de699d648e1dfa73909182ca0d88
- SHA512
  
  b7103a9f624dacb57023ad6e3e9ecd4f49ede5ccd8deeec5976c52567037c935fc70b62ce3abbcdaa7a24686be8b03039e16d4506cae3c8c424f74220fefdc08
- SSDEEP
  
  12288:Jm3ryg7+tKkrxfIoAGA8YHrKreDkca011br+0MACwlg6WggbE/A4:JuryW+5rNIoJZYHrKreQBjWCN4
Score

10^/10

emotet banker persistence trojan
- Emotet
  Emotet is a trojan that is primarily spread through spam emails.
  trojan banker emotet
- Adds Run key to start application
  persistence
behavioral1

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

emotetbankerpersistencetrojan