emotet | 55cd3782df6e740e981e8026c7b766d6462e8fc05f71019067e2dea9b6eccec6 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

55cd3782df6e740e981e8026c7b766d6462e8fc05f71019067e2dea9b6eccec6
Size

712KB
Sample

221103-wtzj6sffeq
MD5

4345d01b989179e75416b643b7b990cc
SHA1

d52b6850e6c847a917d22c25fcd944277339c329
SHA256

55cd3782df6e740e981e8026c7b766d6462e8fc05f71019067e2dea9b6eccec6
SHA512

49181c20dfde80db75b3a95a20cdf1577a1c795f24b9eb7c1690383cdd6aa48a688a82e4ee2ee31b86026f0ba343539493fb98ee918dad0fa01f3dda256bc362
SSDEEP

12288:Jm3ryg7+tKkrxfIoAGA8YHrKrepkca011br+0MACwlg6WggbE/A4:JuryW+5rNIoJZYHrKre+BjWCN4

Score

10^/10

emotet banker persistence trojan

Malware Config

Targets

- Target
  
  55cd3782df6e740e981e8026c7b766d6462e8fc05f71019067e2dea9b6eccec6
- Size
  
  712KB
- MD5
  
  4345d01b989179e75416b643b7b990cc
- SHA1
  
  d52b6850e6c847a917d22c25fcd944277339c329
- SHA256
  
  55cd3782df6e740e981e8026c7b766d6462e8fc05f71019067e2dea9b6eccec6
- SHA512
  
  49181c20dfde80db75b3a95a20cdf1577a1c795f24b9eb7c1690383cdd6aa48a688a82e4ee2ee31b86026f0ba343539493fb98ee918dad0fa01f3dda256bc362
- SSDEEP
  
  12288:Jm3ryg7+tKkrxfIoAGA8YHrKrepkca011br+0MACwlg6WggbE/A4:JuryW+5rNIoJZYHrKre+BjWCN4
Score

10^/10

emotet banker persistence trojan
- Emotet
  Emotet is a trojan that is primarily spread through spam emails.
  trojan banker emotet
- Adds Run key to start application
  persistence
behavioral1

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

emotetbankerpersistencetrojan