emotet | aa1f3a501b934052af2915b920fc3875c7963c7387c3e12dd63c527c6d80795b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

aa1f3a501b934052af2915b920fc3875c7963c7387c3e12dd63c527c6d80795b
Size

712KB
Sample

221103-vn1dvacgc3
MD5

986e70403ed7921a9552fc0ff12057b6
SHA1

5b7459e793a6b0f9ceca6e7e31a18e193213e33b
SHA256

aa1f3a501b934052af2915b920fc3875c7963c7387c3e12dd63c527c6d80795b
SHA512

345f929dec6173e1c5389ccb45924d389d2e7829930fbd7aa206510f893e4ff81b39b0ee4c7858b859c0bbcf38433c372c419b9e5ff3fdd9edad206e5b168f45
SSDEEP

12288:Jm3ryg7+tKkrxfIoAGA8YHrKrekkca011br+0MACwlg6WggbE/A4:JuryW+5rNIoJZYHrKrerBjWCN4

Score

10^/10

emotet banker persistence trojan

Malware Config

Targets

- Target
  
  aa1f3a501b934052af2915b920fc3875c7963c7387c3e12dd63c527c6d80795b
- Size
  
  712KB
- MD5
  
  986e70403ed7921a9552fc0ff12057b6
- SHA1
  
  5b7459e793a6b0f9ceca6e7e31a18e193213e33b
- SHA256
  
  aa1f3a501b934052af2915b920fc3875c7963c7387c3e12dd63c527c6d80795b
- SHA512
  
  345f929dec6173e1c5389ccb45924d389d2e7829930fbd7aa206510f893e4ff81b39b0ee4c7858b859c0bbcf38433c372c419b9e5ff3fdd9edad206e5b168f45
- SSDEEP
  
  12288:Jm3ryg7+tKkrxfIoAGA8YHrKrekkca011br+0MACwlg6WggbE/A4:JuryW+5rNIoJZYHrKrerBjWCN4
Score

10^/10

emotet banker persistence trojan
- Emotet
  Emotet is a trojan that is primarily spread through spam emails.
  trojan banker emotet
- Adds Run key to start application
  persistence
behavioral1

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

emotetbankerpersistencetrojan