Overview

overview

10

Static

static

9

6cb28b9713...40.exe

windows7-x64

10

6cb28b9713...40.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    6cb28b9713a0eac3c33bbd8908af5232fdd005f37aef5273b34e97d496b8ea40

  • Size

    185KB

  • Sample

    221130-werk1seg3v

  • MD5

    ba19b35ee564e6603fb6a69c51e2b7b0

  • SHA1

    217f8f15f57429f2ced1a6e660d7958d978367d0

  • SHA256

    6cb28b9713a0eac3c33bbd8908af5232fdd005f37aef5273b34e97d496b8ea40

  • SHA512

    e83c8f6745ed5445b82ab62e91e06962e546d1d9405a2adb64748e316ff4b0a7a80d67621d5ebdbfb74d234dc482a61a1750f4682b5b20a870891374b5dd29aa

  • SSDEEP

    3072:E8ENSRg5KrR52iOG7jWXlnYNav5KLdIIPF4j5dFZ:E8KSRg5KPHOGErRKL6Gg

Score
10/10
emotetbankercryptonepackertrojan

Malware Config

Targets

    • Target

      6cb28b9713a0eac3c33bbd8908af5232fdd005f37aef5273b34e97d496b8ea40

    • Size

      185KB

    • MD5

      ba19b35ee564e6603fb6a69c51e2b7b0

    • SHA1

      217f8f15f57429f2ced1a6e660d7958d978367d0

    • SHA256

      6cb28b9713a0eac3c33bbd8908af5232fdd005f37aef5273b34e97d496b8ea40

    • SHA512

      e83c8f6745ed5445b82ab62e91e06962e546d1d9405a2adb64748e316ff4b0a7a80d67621d5ebdbfb74d234dc482a61a1750f4682b5b20a870891374b5dd29aa

    • SSDEEP

      3072:E8ENSRg5KrR52iOG7jWXlnYNav5KLdIIPF4j5dFZ:E8KSRg5KPHOGErRKL6Gg

    Score
    10/10
    emotetbankertrojan

    • Emotet

      Emotet is a trojan that is primarily spread through spam emails.

      trojanbankeremotet

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

1
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks