Overview

overview

10

Static

static

9

3bc69b1900...f2.exe

windows7-x64

10

3bc69b1900...f2.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    3bc69b190045f1154faa06ca1af63bfe9cbfbf8dc9c5629e67ed25b33589e7f2

  • Size

    183KB

  • Sample

    230129-w2kqzsac4y

  • MD5

    0f3ae9c6621bf35b97f0804ef9f32fe9

  • SHA1

    a9da4b6ff88d009663286907716f63416812345f

  • SHA256

    3bc69b190045f1154faa06ca1af63bfe9cbfbf8dc9c5629e67ed25b33589e7f2

  • SHA512

    8ff4b98b69dfe75c467f2edb24bab68317eb6757f43aaeccff26ca9e06fc5e5a2a04d5a17412e9de834bb35108e5cccc4f5eff8e8bb4b4f9ad200c8ee1a6a853

  • SSDEEP

    3072:vV+PrAn3UAwpBFPbSbl8ZVcuGdrpWoWxiKJOXx2Q0mIOH0ZPvfdONt7T0Wf6B56l:GME7pTOMkJqiK4Bfc3MNZUPWrp

Score
10/10
emotetbankercryptonepackertrojan

Malware Config

Targets

    • Target

      3bc69b190045f1154faa06ca1af63bfe9cbfbf8dc9c5629e67ed25b33589e7f2

    • Size

      183KB

    • MD5

      0f3ae9c6621bf35b97f0804ef9f32fe9

    • SHA1

      a9da4b6ff88d009663286907716f63416812345f

    • SHA256

      3bc69b190045f1154faa06ca1af63bfe9cbfbf8dc9c5629e67ed25b33589e7f2

    • SHA512

      8ff4b98b69dfe75c467f2edb24bab68317eb6757f43aaeccff26ca9e06fc5e5a2a04d5a17412e9de834bb35108e5cccc4f5eff8e8bb4b4f9ad200c8ee1a6a853

    • SSDEEP

      3072:vV+PrAn3UAwpBFPbSbl8ZVcuGdrpWoWxiKJOXx2Q0mIOH0ZPvfdONt7T0Wf6B56l:GME7pTOMkJqiK4Bfc3MNZUPWrp

    Score
    10/10
    emotetbankertrojan

    • Emotet

      Emotet is a trojan that is primarily spread through spam emails.

      trojanbankeremotet

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

1
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks