Extracted

• • Target

    9228877419831413268.doc

  • Size

    524.3MB

  • MD5

    57d1dc027de7a1647dd47188157188a6

  • SHA1

    317900cd7d39f058f05d59bc0d4d74c1b45a96ad

  • SHA256

    3aa3d10d774fff8cdceb4b6cbbb5da011a273a4123f615bbe00c3b151915eb09

  • SHA512

    b88bfc0850ffd47f6f92cf9f63893ca6bfc8e6637c7ce6ca1be3f504d7607b6ee798024db1e4b4460726bf66e241ac9f16bcab16830634632dcd70895281fb41

  • SSDEEP

    6144:xPn4VZXbatu7MDogsDkHS50LdfcGcbz1f5M9KTFrMpSlMK3Ru+Q28:xP4PbNMkgg3Ru+x

  Score

  10^/10

  emotetepoch4bankerpersistencetrojan

  • Emotet

    Emotet is a trojan that is primarily spread through spam emails.

    trojanbankeremotet

  • Process spawned unexpected child process

    This typically indicates the parent process was compromised via an exploit or macro.

  • Loads dropped DLL

  • Adds Run key to start application

    persistence
  behavioral1behavioral2