Extracted

• • Target

    2023-03-08_1331.doc

  • Size

    512.3MB

  • MD5

    5aca9347ae500cdceaf501e042532c63

  • SHA1

    bca45617cebc3c8829254277251efcd8d0b76b61

  • SHA256

    dcdfad2582ed24815329fa572d0f291e32d1c86e0350055fdee6186418a24676

  • SHA512

    4906373968e2013346d9c9956a9e88c90d8579cb0ae7a1247a2fcfec8c9fef4c30480567c7de985cae809ab076d9a5798360ef9f101b3b4983638094aa5cc2be

  • SSDEEP

    6144:xPn4VZXbatu7MDogsDkHS50LdfcGcbz1f5M9KTFrMpSlMK3Ru+Q28:xP4PbNMkgg3Ru+x

  Score

  10^/10

  emotetepoch4bankerpersistencetrojan

  • Emotet

    Emotet is a trojan that is primarily spread through spam emails.

    trojanbankeremotet

  • Process spawned unexpected child process

    This typically indicates the parent process was compromised via an exploit or macro.

  • Loads dropped DLL

  • Adds Run key to start application

    persistence
  behavioral1behavioral2