Overview

overview

10

Static

static

9

478d22c940...aa.exe

windows7-x64

10

478d22c940...aa.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    478d22c9401f8f4d39330e2a40aa1238339d48ce42785cb69acefc55f2a8f2aa

  • Size

    233KB

  • Sample

    221125-kpj35shh3t

  • MD5

    da42e76df5bff4950de8ab3d00153b9e

  • SHA1

    fe4c88b506622f57cfea8f05addded8a9026038a

  • SHA256

    478d22c9401f8f4d39330e2a40aa1238339d48ce42785cb69acefc55f2a8f2aa

  • SHA512

    0f38971d56f9bd25ac10cfe91720075dc68a9439428c13be839e73ec79a5f7598aa4c828727672e3740857ef187ebf8f46b165e5f23d4596470fc6f83f8853f8

  • SSDEEP

    6144:343an6kYXD7Bu7AmMdAAicwT/t7iQjSaVRPbkZ9rVX:34q6kY07AmefSjNLklX

Score
10/10
emotetbankercryptonepackertrojan

Malware Config

Targets

    • Target

      478d22c9401f8f4d39330e2a40aa1238339d48ce42785cb69acefc55f2a8f2aa

    • Size

      233KB

    • MD5

      da42e76df5bff4950de8ab3d00153b9e

    • SHA1

      fe4c88b506622f57cfea8f05addded8a9026038a

    • SHA256

      478d22c9401f8f4d39330e2a40aa1238339d48ce42785cb69acefc55f2a8f2aa

    • SHA512

      0f38971d56f9bd25ac10cfe91720075dc68a9439428c13be839e73ec79a5f7598aa4c828727672e3740857ef187ebf8f46b165e5f23d4596470fc6f83f8853f8

    • SSDEEP

      6144:343an6kYXD7Bu7AmMdAAicwT/t7iQjSaVRPbkZ9rVX:34q6kY07AmefSjNLklX

    Score
    10/10
    emotetbankertrojan

    • Emotet

      Emotet is a trojan that is primarily spread through spam emails.

      trojanbankeremotet

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

1
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks