Overview

overview

10

Static

static

9

emot.exe

windows10-2004-x64

10

Resubmissions

16-12-2022 04:11

221216-er876agh6x 10

15-12-2022 11:14

221215-nb1erafc2y 10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    emot.exe

  • Size

    109KB

  • Sample

    221215-nb1erafc2y

  • MD5

    ca06acd3e1cab1691a7670a5f23baef4

  • SHA1

    2ea0262cd42378ad00462d080ff18bfe994bb8fc

  • SHA256

    3a9494f66babc7deb43f65f9f28c44bd9bd4b3237031d80314ae7eb3526a4d8f

  • SHA512

    75224915dd9da86375a3d5e55a9395b3d83303e51b9a1060e2d78c3186cb4592b29f907c22e49afe9a69dc3824cca08ae97fc54c98f41ee5ec4da619d0029667

  • SSDEEP

    3072:pCrRG9LgWHyMp6awrpEoNLna76P7dM45pgghr:pCrskJaYvnVPpMXgJ

Score
10/10
emotetbankercryptonepackertrojan

Malware Config

Targets

    • Target

      emot.exe

    • Size

      109KB

    • MD5

      ca06acd3e1cab1691a7670a5f23baef4

    • SHA1

      2ea0262cd42378ad00462d080ff18bfe994bb8fc

    • SHA256

      3a9494f66babc7deb43f65f9f28c44bd9bd4b3237031d80314ae7eb3526a4d8f

    • SHA512

      75224915dd9da86375a3d5e55a9395b3d83303e51b9a1060e2d78c3186cb4592b29f907c22e49afe9a69dc3824cca08ae97fc54c98f41ee5ec4da619d0029667

    • SSDEEP

      3072:pCrRG9LgWHyMp6awrpEoNLna76P7dM45pgghr:pCrskJaYvnVPpMXgJ

    Score
    10/10
    emotetbankertrojan

    • Emotet

      Emotet is a trojan that is primarily spread through spam emails.

      trojanbankeremotet

    • Drops file in System32 directory

    behavioral1

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

System Information Discovery

4
T1082

Query Registry

3
T1012

Peripheral Device Discovery

1
T1120

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks