7a5d773aa6ef4cf71a18234e4037788e635a3f8aeefef0e9898d69453bc53025

Submit
Reports

Overview

overview

Static

static

2020-01-14...75.zip

windows7-x64

2020-01-14...75.zip

windows10-2004-x64

client/202...st.exe

windows7-x64

client/202...st.exe

windows10-2004-x64

client/202...-2.doc

windows7-x64

client/202...-2.doc

windows10-2004-x64

client/202...on.exe

windows7-x64

client/202...on.exe

windows10-2004-x64

client/202...ro.exe

windows7-x64

client/202...ro.exe

windows10-2004-x64

client/gpu...3C.exe

windows7-x64

client/gpu...3C.exe

windows10-2004-x64

client/gpu...tDll64

windows7-x64

client/gpu...tDll64

windows10-2004-x64

client/gpu...tDll64

windows7-x64

client/gpu...tDll64

windows10-2004-x64

client/gpu...s/dinj

windows7-x64

client/gpu...s/dinj

windows10-2004-x64

client/gpu.../dpost

windows7-x64

client/gpu.../dpost

windows10-2004-x64

client/gpu...s/sinj

windows7-x64

client/gpu...s/sinj

windows10-2004-x64

client/gpu...eDll64

windows7-x64

client/gpu...eDll64

windows10-2004-x64

client/gpu...mDll64

windows7-x64

client/gpu...mDll64

windows10-2004-x64

client/gpu...kDll64

windows7-x64

client/gpu...kDll64

windows10-2004-x64

client/gpu.../dpost

windows7-x64

client/gpu.../dpost

windows10-2004-x64

client/gpu...grab64

windows7-x64

client/gpu...grab64

windows10-2004-x64

Resubmissions

28-12-2022 03:05

221228-dk91fahc93 10

20-12-2022 19:37

221220-ycbswsea2x 10

Analysis

max time kernel
41s
max time network
45s
platform
windows7_x64
resource
win7-20220812-en
resource tags

arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
submitted
28-12-2022 03:05

Sharing

Copy URL

Twitter E-mail

Static task

static1

macro

1 signatures

Behavioral task

behavioral1

Sample

2020-01-14-malware-and-artifacts-from-Emotet-epoch-2-infection-with-Trickbot-gtag-mor75.zip

Resource

win7-20220812-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral2

Sample

2020-01-14-malware-and-artifacts-from-Emotet-epoch-2-infection-with-Trickbot-gtag-mor75.zip

Resource

win10v2004-20221111-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral3

Sample

client/2020-01-14-Trickbot-gtag-mor75-retrieved-by-Emotet-infected-host.exe

Resource

win7-20221111-en

trickbot banker trojan

windows7-x64

8 signatures

150 seconds

Behavioral task

behavioral4

Sample

client/2020-01-14-Trickbot-gtag-mor75-retrieved-by-Emotet-infected-host.exe

Resource

win10v2004-20221111-en

trickbot banker trojan

windows10-2004-x64

8 signatures

150 seconds

Behavioral task

behavioral5

Sample

client/2020-01-14-Word-doc-with-macro-for-Emotet-epoch-2.doc

Resource

win7-20220812-en

windows7-x64

12 signatures

150 seconds

Behavioral task

behavioral6

Sample

client/2020-01-14-Word-doc-with-macro-for-Emotet-epoch-2.doc

Resource

win10v2004-20220901-en

windows10-2004-x64

8 signatures

150 seconds

Behavioral task

behavioral7

Sample

client/2020-01-14-follow-up-Emotet-binary-after-initial-infection.exe

Resource

win7-20220812-en

emotet epoch2 banker trojan

windows7-x64

8 signatures

150 seconds

Behavioral task

behavioral8

Sample

client/2020-01-14-follow-up-Emotet-binary-after-initial-infection.exe

Resource

win10v2004-20221111-en

emotet epoch2 banker trojan

windows10-2004-x64

8 signatures

150 seconds

Behavioral task

behavioral9

Sample

client/2020-01-14-initial-Emotet-binary-retrieved-by-Word-macro.exe

Resource

win7-20220812-en

emotet epoch2 banker trojan

windows7-x64

8 signatures

150 seconds

Behavioral task

behavioral10

Sample

client/2020-01-14-initial-Emotet-binary-retrieved-by-Word-macro.exe

Resource

win10v2004-20221111-en

emotet epoch2 banker trojan

windows10-2004-x64

8 signatures

150 seconds

Behavioral task

behavioral11

Sample

client/gpuhealth/GƆCCKX ↀↂ;;;;;;;;;;;;;;;;;;;ж;;;;;;;;;;;яЫФЦйвЫФв003423C.exe

Resource

win7-20221111-en

trickbot banker trojan

windows7-x64

8 signatures

150 seconds

Behavioral task

behavioral12

Sample

client/gpuhealth/GƆCCKX ↀↂ;;;;;;;;;;;;;;;;;;;ж;;;;;;;;;;;яЫФЦйвЫФв003423C.exe

Resource

win10v2004-20220812-en

trickbot banker trojan

windows10-2004-x64

8 signatures

150 seconds

Behavioral task

behavioral13

Sample

client/gpuhealth/data/importDll64

Resource

win7-20220901-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral14

Sample

client/gpuhealth/data/importDll64

Resource

win10v2004-20220812-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral15

Sample

client/gpuhealth/data/injectDll64

Resource

win7-20221111-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral16

Sample

client/gpuhealth/data/injectDll64

Resource

win10v2004-20220812-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral17

Sample

client/gpuhealth/data/injectDll64_configs/dinj

Resource

win7-20221111-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral18

Sample

client/gpuhealth/data/injectDll64_configs/dinj

Resource

win10v2004-20221111-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral19

Sample

client/gpuhealth/data/injectDll64_configs/dpost

Resource

win7-20220812-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral20

Sample

client/gpuhealth/data/injectDll64_configs/dpost

Resource

win10v2004-20220901-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral21

Sample

client/gpuhealth/data/injectDll64_configs/sinj

Resource

win7-20221111-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral22

Sample

client/gpuhealth/data/injectDll64_configs/sinj

Resource

win10v2004-20221111-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral23

Sample

client/gpuhealth/data/mshareDll64

Resource

win7-20221111-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral24

Sample

client/gpuhealth/data/mshareDll64

Resource

win10v2004-20220812-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral25

Sample

client/gpuhealth/data/mwormDll64

Resource

win7-20220812-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral26

Sample

client/gpuhealth/data/mwormDll64

Resource

win10v2004-20220901-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral27

Sample

client/gpuhealth/data/networkDll64

Resource

win7-20220812-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral28

Sample

client/gpuhealth/data/networkDll64

Resource

win10v2004-20220812-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral29

Sample

client/gpuhealth/data/networkDll64_configs/dpost

Resource

win7-20221111-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral30

Sample

client/gpuhealth/data/networkDll64_configs/dpost

Resource

win10v2004-20220812-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral31

Sample

client/gpuhealth/data/pwgrab64

Resource

win7-20221111-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral32

Sample

client/gpuhealth/data/pwgrab64

Resource

win10v2004-20220901-en

windows10-2004-x64

0 signatures

150 seconds

Report Analysis Logs

General

Target

2020-01-14-malware-and-artifacts-from-Emotet-epoch-2-infection-with-Trickbot-gtag-mor75.zip
Size

22.5MB
MD5

58fd4df914ef17cd19f0bb03e709c5b9
SHA1

fcb4c01c970f5b97076a5c93c9ebcc35358215bc
SHA256

7a5d773aa6ef4cf71a18234e4037788e635a3f8aeefef0e9898d69453bc53025
SHA512

b17f997d75597cfec942efdad3ac9e971d3c4a3e26a21a3a213d0235880b716882e45bdbb6b126b797350a42a73acc216512128421202575119975978766866d
SSDEEP

393216:J3CH9KWwLtfI2nfIkuBvF6sbP5HlqjUGO0hXCYwLHOfitxfU3:5qxwpfI2nfIkuB0sbRYjUGvdwLUitVU3

Score

1^/10

Malware Config

Signatures

Processes

C:\Windows\Explorer.exe
C:\Windows\Explorer.exe /idlist,,C:\Users\Admin\AppData\Local\Temp\2020-01-14-malware-and-artifacts-from-Emotet-epoch-2-infection-with-Trickbot-gtag-mor75.zip
1⤵
PID:1604

Resubmissions

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads