Overview

overview

10

Static

static

9

5ba3813043...7b.exe

windows7-x64

10

5ba3813043...7b.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    5ba3813043b9f35c82e07f8450a2bd266c28faee36fc47ff2c940b94a9849d7b

  • Size

    201KB

  • Sample

    221130-vrydnacg4z

  • MD5

    bf0193002825f240df1b2428ea2965bb

  • SHA1

    749f91ed92d6e5bb0180fc75743f379828ff3ff1

  • SHA256

    5ba3813043b9f35c82e07f8450a2bd266c28faee36fc47ff2c940b94a9849d7b

  • SHA512

    2030903298ed1f8e2fb407ca2694f92af47daaceea8e93a183d0dbfea2c0a84e2eec32781f4b850c52c05cd531c601c02c2fcc26ada2cc13ad85888a3da39fe6

  • SSDEEP

    3072:NDSXf2ro/JcXsFptLu3GIPkqu8J27A76NY364QbfvTkCXVW4wFm2jZqMNeNf:NDef2roRc+1uFP9/J27A76yQbfvSJvEf

Score
10/10
emotetbankercryptonepackertrojan

Malware Config

Targets

    • Target

      5ba3813043b9f35c82e07f8450a2bd266c28faee36fc47ff2c940b94a9849d7b

    • Size

      201KB

    • MD5

      bf0193002825f240df1b2428ea2965bb

    • SHA1

      749f91ed92d6e5bb0180fc75743f379828ff3ff1

    • SHA256

      5ba3813043b9f35c82e07f8450a2bd266c28faee36fc47ff2c940b94a9849d7b

    • SHA512

      2030903298ed1f8e2fb407ca2694f92af47daaceea8e93a183d0dbfea2c0a84e2eec32781f4b850c52c05cd531c601c02c2fcc26ada2cc13ad85888a3da39fe6

    • SSDEEP

      3072:NDSXf2ro/JcXsFptLu3GIPkqu8J27A76NY364QbfvTkCXVW4wFm2jZqMNeNf:NDef2roRc+1uFP9/J27A76yQbfvSJvEf

    Score
    10/10
    emotetbankertrojan

    • Emotet

      Emotet is a trojan that is primarily spread through spam emails.

      trojanbankeremotet

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

1
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks