Overview

overview

10

Static

static

9

e46e31f18f...f5.exe

windows7-x64

10

e46e31f18f...f5.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    e46e31f18fff347507b937316f34f214b5a7701917edfe26c0aa0cfea4f299f5

  • Size

    108KB

  • Sample

    221130-qpe23sdg52

  • MD5

    20ebc8c8a59c8c0555473ea7dceb3917

  • SHA1

    2ab4d6ea573388e7f5ecb040c01833309a9cb75d

  • SHA256

    e46e31f18fff347507b937316f34f214b5a7701917edfe26c0aa0cfea4f299f5

  • SHA512

    9128f6d50a687b365f2e9d6d982db55980520677794f407ffbaffc76909004fc2e17338c0a9a3bc62e2902a27afe068c6f39a3569f8695a8ef14a0c3747eb47e

  • SSDEEP

    3072:mCrRG9LEWHyMp6awrpEoNLna7EP7N5Ltgxx:mCrs0JaYvnDPdgf

Score
10/10
emotetbankercryptonepackertrojan

Malware Config

Targets

    • Target

      e46e31f18fff347507b937316f34f214b5a7701917edfe26c0aa0cfea4f299f5

    • Size

      108KB

    • MD5

      20ebc8c8a59c8c0555473ea7dceb3917

    • SHA1

      2ab4d6ea573388e7f5ecb040c01833309a9cb75d

    • SHA256

      e46e31f18fff347507b937316f34f214b5a7701917edfe26c0aa0cfea4f299f5

    • SHA512

      9128f6d50a687b365f2e9d6d982db55980520677794f407ffbaffc76909004fc2e17338c0a9a3bc62e2902a27afe068c6f39a3569f8695a8ef14a0c3747eb47e

    • SSDEEP

      3072:mCrRG9LEWHyMp6awrpEoNLna7EP7N5Ltgxx:mCrs0JaYvnDPdgf

    Score
    10/10
    emotetbankertrojan

    • Emotet

      Emotet is a trojan that is primarily spread through spam emails.

      trojanbankeremotet

    • Unexpected DNS network traffic destination

      Network traffic to other servers than the configured DNS servers was detected on the DNS port.

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

1
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks