Extracted

• • Target

    927eefd9-ec2c-b34e-8698-661983f13e94.eml

  • Size

    946KB

  • MD5

    ee94a292cf21d46de986ff8c4315dc4c

  • SHA1

    64ad394d3d46f5a3008c49e7026e31cd1354669e

  • SHA256

    d66ec368c1f0c2d61f6cad21c6c0973fbdd561773af184fada09bb62d0309e4b

  • SHA512

    a5167b1227b559a6a768953914cece9b263da9aa64d4a11ecc6413ef85da510de415e22dc855770eb4f428478f2114bb41c8439e53807624e6e9d8801ca39b9f

  • SSDEEP

    12288:bsUZ9HN04OLTV66/ykEb8Py3T0WVBdLlm:BjHN+LTAsyzbtXA

  Score

  5^/10

  • Drops file in System32 directory

  behavioral1behavioral2

• • Target

    Fattura 2023 - IT 00993.zip

  • Size

    681KB

  • MD5

    faa2ca89c9dee92509f76e13842d4948

  • SHA1

    54e094259fa43c6325628341ed50c7e37f2d9b1e

  • SHA256

    065e73791d226ae65846cccb9b99a447c0659481c0a57585cc28e5e72a0660f1

  • SHA512

    4b6e22d33fcf3e01db9760391e7aeb90741d83e65c16599d509ff7c476cb82a5570b578a6dac0d94c7b7d5f5669c9cc4132fb06d463c1ba1a7066bc4ad0dd496

  • SSDEEP

    3072:+TdhlKitY6gngARvVndTW9ZCPuJSDCKvjl1flV+crxAm40/yL/sEZGNKl/c:WhQOY6egwndgkPwSDCKFVj+mb/yFIs/c

  Score

  1^/10
  behavioral3behavioral4

• • Target

    Fattura 2023 - IT 00993.doc

  • Size

    522.3MB

  • MD5

    810a64ae0b33101c6c9247d9f01d4ec2

  • SHA1

    c43bfa75046c4ddf1d6c73961ada5d273822f34b

  • SHA256

    c6f249d45a78978f7e1256d9606948802f8f040b16f39e646f0ef6b3b6c68198

  • SHA512

    c52327c9f033db5f2b975390de37a44b8ed013c401438733032a09c11475a4d0aa4714c4358ff06a958abe290cc2f22e1ac80e3b8294b6390f9efff7c99d1927

  • SSDEEP

    6144:jkmCUX1RauEA55axdWFyDDIqqmbwbLUW:omC7uz552AFZqXbwbA

  Score

  10^/10

  emotetepoch4bankerpersistencetrojan

  • Emotet

    Emotet is a trojan that is primarily spread through spam emails.

    trojanbankeremotet

  • Process spawned unexpected child process

    This typically indicates the parent process was compromised via an exploit or macro.

  • Loads dropped DLL

  • Adds Run key to start application

    persistence
  behavioral5behavioral6

• • Target

    email-html-1.txt

  • Size

    484B

  • MD5

    e3ae7d7a38830ce2a3ac5229f3c766c6

  • SHA1

    5fee2ff08ecd5a7ca26452725d6d0a5ba181549b

  • SHA256

    bf3864c410c5c5296c19baa136d4b72968fc5064d756ffca5ac520a1c6822869

  • SHA512

    11d06d189e799e69c0f6c40eb71c7a64fd1542e040b7504995fe0f4fa3634e71ac443228c64648be64c62e7857dc196b61e022288020047953090c9fa27a1746

  Score

  1^/10
  behavioral7behavioral8