Overview

overview

10

Static

static

9

ff41b9d03a...25.exe

windows7-x64

10

ff41b9d03a...25.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ff41b9d03abe184995f54936081f0e24b914021e2e73a2b4b7824180add14225

  • Size

    179KB

  • Sample

    221130-rbrpdsae5t

  • MD5

    458c48b22e6a193d4eb6e013ff3e8cb3

  • SHA1

    95f40b425f869c54fc0e9495a58e9896e68c097b

  • SHA256

    ff41b9d03abe184995f54936081f0e24b914021e2e73a2b4b7824180add14225

  • SHA512

    8e4498479757c61a3be0d9b6695bc4dacbf6115e23314c49e499f5a35ea587e8855eb433ddeb2d0c6732d2946d201ae1b6bdf6971495186a172b68244653c865

  • SSDEEP

    3072:nD9MPnIerKU8KpzRgorKy6/HH3/29Uy+Hy/yWXVWm+5iq:nDar8KnsnFy/yR5j

Score
10/10
emotetbankercryptonepackertrojan

Malware Config

Targets

    • Target

      ff41b9d03abe184995f54936081f0e24b914021e2e73a2b4b7824180add14225

    • Size

      179KB

    • MD5

      458c48b22e6a193d4eb6e013ff3e8cb3

    • SHA1

      95f40b425f869c54fc0e9495a58e9896e68c097b

    • SHA256

      ff41b9d03abe184995f54936081f0e24b914021e2e73a2b4b7824180add14225

    • SHA512

      8e4498479757c61a3be0d9b6695bc4dacbf6115e23314c49e499f5a35ea587e8855eb433ddeb2d0c6732d2946d201ae1b6bdf6971495186a172b68244653c865

    • SSDEEP

      3072:nD9MPnIerKU8KpzRgorKy6/HH3/29Uy+Hy/yWXVWm+5iq:nDar8KnsnFy/yR5j

    Score
    10/10
    emotetbankertrojan

    • Emotet

      Emotet is a trojan that is primarily spread through spam emails.

      trojanbankeremotet

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

1
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks