Overview

overview

10

Static

static

9

b6a03ef650...94.exe

windows7-x64

5

b6a03ef650...94.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    b6a03ef6505f465c895d0887c0479db9e2cdf7d391123a14c03b1af7dcb69594

  • Size

    200KB

  • Sample

    221130-s7c2jsdc42

  • MD5

    302b61562fd258c88ab0db3ffa640faf

  • SHA1

    bf6d895f57b8f18d5b2a0f6ca969c93b142fbce5

  • SHA256

    b6a03ef6505f465c895d0887c0479db9e2cdf7d391123a14c03b1af7dcb69594

  • SHA512

    71f9e1b27653fa8af02e9846691014ccf8676b07679b4555a09dbf2e9e347027f0d186ec96c80a26abc252d74cec8ef43cfbc1b684c8edf003dcc79cadb58fe0

  • SSDEEP

    3072:GNkhoRdoQbxSTcbrh82bQZfR3pKHJLbSvGft0WtPwpIC:GNgo3oInbQZp5MJLbSvGfh0

Score
10/10
emotetbankercryptonepackertrojan

Malware Config

Targets

    • Target

      b6a03ef6505f465c895d0887c0479db9e2cdf7d391123a14c03b1af7dcb69594

    • Size

      200KB

    • MD5

      302b61562fd258c88ab0db3ffa640faf

    • SHA1

      bf6d895f57b8f18d5b2a0f6ca969c93b142fbce5

    • SHA256

      b6a03ef6505f465c895d0887c0479db9e2cdf7d391123a14c03b1af7dcb69594

    • SHA512

      71f9e1b27653fa8af02e9846691014ccf8676b07679b4555a09dbf2e9e347027f0d186ec96c80a26abc252d74cec8ef43cfbc1b684c8edf003dcc79cadb58fe0

    • SSDEEP

      3072:GNkhoRdoQbxSTcbrh82bQZfR3pKHJLbSvGft0WtPwpIC:GNgo3oInbQZp5MJLbSvGfh0

    Score
    10/10
    emotetbankertrojan

    • Emotet

      Emotet is a trojan that is primarily spread through spam emails.

      trojanbankeremotet

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

1
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks