Overview

overview

10

Static

static

9

c15be020a7...54.exe

windows7-x64

10

c15be020a7...54.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    c15be020a73c9a655c49fdde613a8056729a7afbf13fde1d509d2b15ab9ca954

  • Size

    360KB

  • Sample

    230129-wsrg6shh7z

  • MD5

    8c150a49cf075c56a977d5a5aa858b14

  • SHA1

    a755d1e193c3d81eaa4a581a33f8d49cc7d10507

  • SHA256

    c15be020a73c9a655c49fdde613a8056729a7afbf13fde1d509d2b15ab9ca954

  • SHA512

    9af5073d5e869009564b2d7c540c8918deeb4768d9f90ddd647c90c4a40a6583d8f3e671bb5330cf29b525683025b489af4b359ab68960092936db1ee3f0baab

  • SSDEEP

    6144:IT9P02oCOcImaKGD0oEOGSerEhgVIXFMv:0PlosIHooDerLIXi

Score
10/10
emotetbankercryptonepackertrojan

Malware Config

Targets

    • Target

      c15be020a73c9a655c49fdde613a8056729a7afbf13fde1d509d2b15ab9ca954

    • Size

      360KB

    • MD5

      8c150a49cf075c56a977d5a5aa858b14

    • SHA1

      a755d1e193c3d81eaa4a581a33f8d49cc7d10507

    • SHA256

      c15be020a73c9a655c49fdde613a8056729a7afbf13fde1d509d2b15ab9ca954

    • SHA512

      9af5073d5e869009564b2d7c540c8918deeb4768d9f90ddd647c90c4a40a6583d8f3e671bb5330cf29b525683025b489af4b359ab68960092936db1ee3f0baab

    • SSDEEP

      6144:IT9P02oCOcImaKGD0oEOGSerEhgVIXFMv:0PlosIHooDerLIXi

    Score
    10/10
    emotetbankertrojan

    • Emotet

      Emotet is a trojan that is primarily spread through spam emails.

      trojanbankeremotet

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

1
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks