Overview

overview

10

Static

static

9

c27abdb164...3c.exe

windows7-x64

10

c27abdb164...3c.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    c27abdb16492b4c1a455a23f243d8b1f9803fc5e754d9474bf155ec96cd58e3c

  • Size

    182KB

  • Sample

    230129-wsnfhsge57

  • MD5

    bffb4f8200a009590afec2d442d6f9b4

  • SHA1

    fcb42fe77f2babeab8f92bdb63a0d7e98a4b357c

  • SHA256

    c27abdb16492b4c1a455a23f243d8b1f9803fc5e754d9474bf155ec96cd58e3c

  • SHA512

    f17685a53d1116dcd71a2e51809313e4b1192a48cfcad532e277b452ccd08ad36ce24d9b3d0a3d6cd9e8f22c5699bc7ab1e5db1ce4bfc917090cfd046b2bfeab

  • SSDEEP

    3072:tImQYNtmlphxLDTMcbHjqgm3BS8DVMTZyXBF1pWUy8:tImQY/gp3TPDrm3BpjRF1t

Score
10/10
emotetbankercryptonepackertrojan

Malware Config

Targets

    • Target

      c27abdb16492b4c1a455a23f243d8b1f9803fc5e754d9474bf155ec96cd58e3c

    • Size

      182KB

    • MD5

      bffb4f8200a009590afec2d442d6f9b4

    • SHA1

      fcb42fe77f2babeab8f92bdb63a0d7e98a4b357c

    • SHA256

      c27abdb16492b4c1a455a23f243d8b1f9803fc5e754d9474bf155ec96cd58e3c

    • SHA512

      f17685a53d1116dcd71a2e51809313e4b1192a48cfcad532e277b452ccd08ad36ce24d9b3d0a3d6cd9e8f22c5699bc7ab1e5db1ce4bfc917090cfd046b2bfeab

    • SSDEEP

      3072:tImQYNtmlphxLDTMcbHjqgm3BS8DVMTZyXBF1pWUy8:tImQY/gp3TPDrm3BpjRF1t

    Score
    10/10
    emotetbankertrojan

    • Emotet

      Emotet is a trojan that is primarily spread through spam emails.

      trojanbankeremotet

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

1
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks