emotet | ff60d8d52a2def36356bfe2bac29c1a379abf2616346dbe719b34ac5afa783c8 | Triage

Sharing

General

Target

ff60d8d52a2def36356bfe2bac29c1a379abf2616346dbe719b34ac5afa783c8
Size

71KB
Sample

230129-wmhm3shf9z
MD5

fc2a4d006ed5a27502742ce6236ab6ff
SHA1

e6242d145aa233eb620566db530287772dcde757
SHA256

ff60d8d52a2def36356bfe2bac29c1a379abf2616346dbe719b34ac5afa783c8
SHA512

020488198235bf287994eaf9e70b128324add9c3e409c2d4c76131807eb30192a1b75e9442cc84ee001f1b92507032a9d0dc045dcf75d7fd18434dc4caffaf8a
SSDEEP

1536:F1LUTopFH5qj6HTgSqKo5umXqTXiV5DfDXfMtiu:zAop/qmHwETXyrDXo

Score

10^/10

emotet banker trojan

Malware Config

Targets

- Target
  
  ff60d8d52a2def36356bfe2bac29c1a379abf2616346dbe719b34ac5afa783c8
- Size
  
  71KB
- MD5
  
  fc2a4d006ed5a27502742ce6236ab6ff
- SHA1
  
  e6242d145aa233eb620566db530287772dcde757
- SHA256
  
  ff60d8d52a2def36356bfe2bac29c1a379abf2616346dbe719b34ac5afa783c8
- SHA512
  
  020488198235bf287994eaf9e70b128324add9c3e409c2d4c76131807eb30192a1b75e9442cc84ee001f1b92507032a9d0dc045dcf75d7fd18434dc4caffaf8a
- SSDEEP
  
  1536:F1LUTopFH5qj6HTgSqKo5umXqTXiV5DfDXfMtiu:zAop/qmHwETXyrDXo
Score

10^/10

emotet banker trojan
- Emotet
  Emotet is a trojan that is primarily spread through spam emails.
  trojan banker emotet
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

emotetbankertrojan

behavioral2

emotetbankertrojan